Vulnerabilities > CVE-2020-11866 - Use After Free vulnerability in multiple products

Attack vector

LOCAL

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

HIGH

Integrity impact

HIGH

Availability impact

HIGH

local

low complexity

nessus

NVD

Published: 2020-05-11

Updated: 2024-11-21

Summary

libEMF (aka ECMA-234 Metafile Library) through 1.0.11 allows a use-after-free.

Part	Description	Count
Application	Libemf_Project Libemf Project Libemf 1.0 Libemf Project Libemf 1.0.4 Libemf Project Libemf 1.0.5 Libemf Project Libemf 1.0.6 Libemf Project Libemf 1.0.7 Libemf Project Libemf 1.0.8 Libemf Project Libemf 1.0.9 Libemf Project Libemf 1.0.11	8
OS	Opensuse Opensuse Leap 15.1	1
OS	Fedoraproject Fedoraproject Fedora 31	1

NASL family	Fedora Local Security Checks
NASL id	FEDORA_2020-C696D8604B.NASL
description	Latest upstream release fixing security issues. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.
last seen	2020-06-06
modified	2020-05-28
plugin id	136939
published	2020-05-28
reporter	This script is Copyright (C) 2020 and is owned by Tenable, Inc. or an Affiliate thereof.
source	https://www.tenable.com/plugins/nessus/136939
title	Fedora 31 : libEMF (2020-c696d8604b)