Bugzilla – Bug 1173070
VUL-0: CVE-2020-13999: libEMF: integer overflow and denial of service in ScaleViewPortExtEx
Last modified: 2022-09-16 12:16:04 UTC
CVE-2020-13999 ScaleViewPortExtEx in libemf.cpp in libEMF (aka ECMA-234 Metafile Library) 1.0.12 allows an integer overflow and denial of service via a crafted EMF file. References: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2020-13999 http://people.canonical.com/~ubuntu-security/cve/2020/CVE-2020-13999.html http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-13999 https://sourceforge.net/projects/libemf/ http://libemf.sourceforge.net/index.html https://sourceforge.net/p/libemf/news/2020/06/release-of-libemf-1013/ https://sourceforge.net/p/libemf/code/HEAD/tree/
relevant diff: https://sourceforge.net/p/libemf/code/98/tree//trunk/libemf/libemf.cpp?diff=50c6360b34309d09be9d1a1b:97
tracking both SUSE:SLE-12:Update and SUSE:SLE-15:Update as affected.
maybe it makes sense to include the sanity check, that x_num, x_den, y_num, y_den are not 0, into the diff.
Working on SUSE:SLE-12:Update and SUSE:SLE-15:Update
Submitted: SUSE:SLE-12:Update : created request id 278469 SUSE:SLE-15:Update : created request id 278470
(In reply to Robert Frohl from comment #3) > maybe it makes sense to include the sanity check, that x_num, x_den, y_num, > y_den are not 0, into the diff. Yes, yes it does make sense. Resubmitted and superseded: SUSE:SLE-12:Update : created request id 278472 SUSE:SLE-15:Update : created request id 278471
My part is done, I think. Assigning to security-team.
SUSE-SU-2022:3190-1: An update that fixes one vulnerability is now available. Category: security (moderate) Bug References: 1173070 CVE References: CVE-2020-13999 JIRA References: Sources used: SUSE Linux Enterprise Workstation Extension 12-SP5 (src): libEMF-1.0.7-11.6.1 SUSE Linux Enterprise Software Development Kit 12-SP5 (src): libEMF-1.0.7-11.6.1 NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination.
SUSE-SU-2022:3191-1: An update that fixes one vulnerability is now available. Category: security (moderate) Bug References: 1173070 CVE References: CVE-2020-13999 JIRA References: Sources used: openSUSE Leap 15.3 (src): libEMF-1.0.7-150000.3.6.1 SUSE Linux Enterprise Workstation Extension 15-SP3 (src): libEMF-1.0.7-150000.3.6.1 NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination.
done