ScaleViewPortExtEx in libemf.cpp in libEMF (aka ECMA-234 Metafile Library) 1.0.12 allows an integer overflow and denial of service via a crafted EMF file.
{ "availability": "No subscription required", "ubuntu_priority": "medium", "binaries": [ { "binary_version": "1.0.13-2", "binary_name": "libemf-dev" }, { "binary_version": "1.0.13-2", "binary_name": "libemf-doc" }, { "binary_version": "1.0.13-2", "binary_name": "libemf1" }, { "binary_version": "1.0.13-2", "binary_name": "libemf1-dbgsym" }, { "binary_version": "1.0.13-2", "binary_name": "printemf" }, { "binary_version": "1.0.13-2", "binary_name": "printemf-dbgsym" } ] }