Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2020-11866

Опубликовано: 11 мая 2020
Источник: redhat
CVSS3: 7.8
EPSS Низкий

Описание

libEMF (aka ECMA-234 Metafile Library) through 1.0.11 allows a use-after-free.

Отчет

libEMF is a C/C++ library which provides a drawing toolkit based on ECMA-234. The general purpose of this library is to create vector graphics files on POSIX systems which can be imported into OpenOffice.org or LibreOffice. Programs compiled with libEMF, output ECMA-234 graphics files locally which can be then imported into desktop applications. Therefore this use-after-free flaw can only be triggered via maliciously written applications compiled with libEMF.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat Enterprise Linux 6libEMFOut of support scope

Показывать по

Дополнительная информация

Статус:

Moderate
Дефект:
CWE-416

EPSS

Процентиль: 61%
0.0041
Низкий

7.8 High

CVSS3

Связанные уязвимости

CVSS3: 7.8
ubuntu
больше 5 лет назад

libEMF (aka ECMA-234 Metafile Library) through 1.0.11 allows a use-after-free.

CVSS3: 7.8
nvd
больше 5 лет назад

libEMF (aka ECMA-234 Metafile Library) through 1.0.11 allows a use-after-free.

CVSS3: 7.8
debian
больше 5 лет назад

libEMF (aka ECMA-234 Metafile Library) through 1.0.11 allows a use-aft ...

CVSS3: 7.8
github
больше 3 лет назад

libEMF (aka ECMA-234 Metafile Library) through 1.0.11 allows a use-after-free.

suse-cvrf
больше 5 лет назад

Security update for libEMF

EPSS

Процентиль: 61%
0.0041
Низкий

7.8 High

CVSS3