Security-X

Forum Security-X => News => Discussion démarrée par: igor51 le février 24, 2021, 12:00:40

Titre: [MCAFEE]Vulnerability Discovery in Open Source Libraries: Analyzing CVE-2020-11863
Posté par: igor51 le février 24, 2021, 12:00:40
Vulnerability Discovery in Open Source Libraries: Analyzing CVE-2020-11863


Open Source projects are the building blocks of any software development process. As we indicated in our previous blog, as more and more products use open source code, the increase in the overall attack surface is inevitable, especially when open source code is not audited before use. Hence it is recommended to thoroughly test it […]


The post Vulnerability Discovery in Open Source Libraries: Analyzing CVE-2020-11863 appeared first on McAfee Blogs.


Source: Vulnerability Discovery in Open Source Libraries: Analyzing CVE-2020-11863 (https://www.mcafee.com/blogs/other-blogs/mcafee-labs/vulnerability-discovery-in-open-source-libraries-analyzing-cve-2020-11863/)
Titre: Re : [MCAFEE]Vulnerability Discovery in Open Source Libraries: Analyzing CVE-2020-11863
Posté par: Tawal le février 24, 2021, 13:14:57
Citation de: McAfee-Blogs
We also indicated that we were researching graphics libraries in Windows and Linux, reporting multiple vulnerabilities in Windows GDI as well as Linux vector graphics library libEMF. We are still auditing many other Linux graphics libraries since these are legacy code and have not been strictly tested before.

Thanks a lot McAfee  :AAF