A flaw was found in PlayEnhMetaFileRecord in enhmetafile.c in Wine 3.7 allows attackers to cause a denial of service (out-of-bounds write) or possibly have unspecified other impact because the attacker controls the pCreatePen->ihPen array index. References: https://bugs.launchpad.net/ubuntu/+source/wine/+bug/1764719 https://bugs.winehq.org/attachment.cgi?id=61285 https://bugs.winehq.org/show_bug.cgi?id=45106 Upstream Patch: https://source.winehq.org/git/wine.git/commit/8d2676fd14f130f9e8f06744743423168bf8d18d https://source.winehq.org/git/wine.git/commit/b6da3547d8990c3c3affc3a5865aefd2a0946949
Created wine tracking bugs for this issue: Affects: epel-all [bug 1597851]
This CVE Bugzilla entry is for community support informational purposes only as it does not affect a package in a commercially supported Red Hat product. Refer to the dependent bugs for status of those individual community products.