Vulnerabilities

TI-2020-10966 CVE-2020-13999 · GHSA-gg66-2489-7gr5

ScaleViewPortExtEx in libemf.cpp in libEMF (aka ECMA-234 Metafile Library) 1.0.12 allows…

LOW 27

ScaleViewPortExtEx in libemf.cpp in libEMF (aka ECMA-234 Metafile Library) 1.0.12 allows an integer overflow and denial of service via a crafted EMF file.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.01291 Published 2020-06-15 Will not fix CWE-190

TI-2020-09536 CVE-2020-11866 · GHSA-97vq-mgmh-2r8q

libEMF (aka ECMA-234 Metafile Library) through 1.0.11 allows a use-after-free.

LOW 37

libEMF (aka ECMA-234 Metafile Library) through 1.0.11 allows a use-after-free.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.01353 Published 2020-05-11 Will not fix CWE-416

TI-2020-09535 CVE-2020-11865 · GHSA-g6j2-7rfr-vwqx

libEMF (aka ECMA-234 Metafile Library) through 1.0.11 allows out-of-bounds memory access.

LOW 37

libEMF (aka ECMA-234 Metafile Library) through 1.0.11 allows out-of-bounds memory access.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.01392 Published 2020-05-11 Will not fix CWE-119

TI-2020-09534 CVE-2020-11864 · GHSA-pf4w-prfj-vwv2

libEMF (aka ECMA-234 Metafile Library) through 1.0.11 allows denial of service (issue 2 of 2).

LOW 28

libEMF (aka ECMA-234 Metafile Library) through 1.0.11 allows denial of service (issue 2 of 2).

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.01384 Published 2020-05-11 Will not fix

TI-2020-09533 CVE-2020-11863 · GHSA-c5jf-2q48-cvcx

libEMF (aka ECMA-234 Metafile Library) through 1.0.11 allows denial of service (issue 1 of 2).

LOW 27

libEMF (aka ECMA-234 Metafile Library) through 1.0.11 allows denial of service (issue 1 of 2).

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.01115 Published 2020-05-11 Will not fix

Vulnerabilities

Filters

ScaleViewPortExtEx in libemf.cpp in libEMF (aka ECMA-234 Metafile Library) 1.0.12 allows…

libEMF (aka ECMA-234 Metafile Library) through 1.0.11 allows a use-after-free.

libEMF (aka ECMA-234 Metafile Library) through 1.0.11 allows out-of-bounds memory access.

libEMF (aka ECMA-234 Metafile Library) through 1.0.11 allows denial of service (issue 2 of 2).

libEMF (aka ECMA-234 Metafile Library) through 1.0.11 allows denial of service (issue 1 of 2).