ScaleViewPortExtEx in libemf.cpp in libEMF (aka ECMA-234 Metafile Library) 1.0.12 allows an integer overflow and denial of service via a crafted EMF file.
Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-13999
Reference (s):
- FEDORA:FEDORA-2020-4407a1983d
- URL: https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/555PIBSHDUZD26UCJ5DHCQ4W7RXEZC66/
- FEDORA:FEDORA-2020-964e46d289
- URL: https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CVZXYNDM4YOONMXYPW2GTMIS6V6JBIL6/
- http://libemf.sourceforge.net/index.html