libEMF Input Validation Error Vulnerability

libEMF is a library for generating enhanced metafiles. An input validation error vulnerability exists in the ScaleViewPortExtEx of the libemf.cpp file in libEMF version 1.0.12. An attacker can exploit this vulnerability to cause a denial of service with a specially crafted EMF file...

CVE-2020-13999

ScaleViewPortExtEx in libemf.cpp in libEMF aka ECMA-234 Metafile Library 1.0.12 allows an integer overflow and denial of service via a crafted EMF file...

CVE-2020-13999

CVE-2020-13999 affects libEMF (ECMA-234 Metafile Library). The vulnerability is an integer overflow in ScaleViewPortExtEx implemented in libemf.cpp of libEMF 1.0.12, allowing denial of service via a crafted EMF file. Publicly documented in multiple advisories (SUSE-SU-2022:3190/3191, OSV entries)...

CVE-2020-13999

ScaleViewPortExtEx in libemf.cpp in libEMF aka ECMA-234 Metafile Library 1.0.12 allows an integer overflow and denial of service via a crafted EMF file...

CVE-2020-11863

libEMF aka ECMA-234 Metafile Library through 1.0.11 allows denial of service issue 1 of 2...

DEBIAN-CVE-2020-11863

libEMF aka ECMA-234 Metafile Library through 1.0.11 allows denial of service issue 1 of 2...

DEBIAN-CVE-2020-11864

libEMF aka ECMA-234 Metafile Library through 1.0.11 allows denial of service issue 2 of 2...

DEBIAN-CVE-2020-11866

libEMF aka ECMA-234 Metafile Library through 1.0.11 allows a use-after-free...

Design/Logic Flaw

libEMF aka ECMA-234 Metafile Library through 1.0.11 allows a use-after-free...

Denial of service

libEMF aka ECMA-234 Metafile Library through 1.0.11 allows denial of service issue 1 of 2...

UBUNTU-CVE-2020-11864

libEMF aka ECMA-234 Metafile Library through 1.0.11 allows denial of service issue 2 of 2...

CVE-2020-11865

libEMF aka ECMA-234 Metafile Library through 1.0.11 allows out-of-bounds memory access...

CVE-2020-11863

libEMF aka ECMA-234 Metafile Library through 1.0.11 allows denial of service issue 1 of 2...

CVE-2020-11866

libEMF aka ECMA-234 Metafile Library through 1.0.11 allows a use-after-free...

CVE-2020-11864

libEMF aka ECMA-234 Metafile Library through 1.0.11 allows denial of service issue 2 of 2...

UBUNTU-CVE-2020-11866

libEMF aka ECMA-234 Metafile Library through 1.0.11 allows a use-after-free...

UBUNTU-CVE-2020-11865

libEMF aka ECMA-234 Metafile Library through 1.0.11 allows out-of-bounds memory access...

CVE-2020-11866

Consolidated evidence from connected documents confirms libEMF (ECMA-234 Metafile Library) vulnerabilities, including CVE-2020-11866 (use-after-free), have been addressed in multiple Linux distributions. OpenSUSE openSUSE-2020:0831-1 and SUSE/SLE-15:Update entries cite fixes for CVE-2020-11863 th...

CVE-2020-11865

libEMF aka ECMA-234 Metafile Library through 1.0.11 allows out-of-bounds memory access...

CVE-2020-11865

libEMF (ECMA-234 Metafile Library) up to version 1.0.11 contains an out-of-bounds memory access vulnerability (CVE-2020-11865). Multiple advisories note fixes in a later release (e.g., 1.0.12) and patches across distributions (openSUSE/SLE SUSE updates OpenVAS/OSV entries). Affected products incl...