Lucene search

K
cvelistMitreCVELIST:CVE-2020-17353
HistoryAug 05, 2020 - 12:55 p.m.

CVE-2020-17353

2020-08-0512:55:02
mitre
www.cve.org
5
cve-2020-17353
lilypond
vulnerability
embedded-ps
embedded-svg
postscript code

AI Score

9.4

Confidence

High

EPSS

0.004

Percentile

73.0%

scm/define-stencil-commands.scm in LilyPond through 2.20.0, and 2.21.x through 2.21.4, when -dsafe is used, lacks restrictions on embedded-ps and embedded-svg, as demonstrated by including dangerous PostScript code.

AI Score

9.4

Confidence

High

EPSS

0.004

Percentile

73.0%