LilyPond 2.19.12

CPE Details

LilyPond 2.19.12
lilypond
lilypond
2.19.12
2019-12-05
16h36 +00:00
2019-12-05
16h36 +00:00
CPE NVD
Alerte pour un CPE
Restez informé de toutes modifications pour un CPE spécifique.
Gestion des notifications

CPE Name: cpe:2.3:a:lilypond:lilypond:2.19.12:*:*:*:*:*:*:*

Informations

Vendor

lilypond

Product

lilypond

Version

2.19.12

Related CVE

Open and find in CVE List

CVE ID Publié Description Score Gravité
CVE-2020-17354 2023-04-15 00h00 +00:00 LilyPond before 2.24 allows attackers to bypass the -dsafe protection mechanism via output-def-lookup or output-def-scope, as demonstrated by dangerous Scheme code in a .ly file that causes arbitrary code execution during conversion to a different file format. NOTE: in 2.24 and later versions, safe mode is removed, and the product no longer tries to block code execution when external files are used.
8.6
Haute
CVE-2020-17353 2020-08-05 10h55 +00:00 scm/define-stencil-commands.scm in LilyPond through 2.20.0, and 2.21.x through 2.21.4, when -dsafe is used, lacks restrictions on embedded-ps and embedded-svg, as demonstrated by including dangerous PostScript code.
9.8
Critique