CVE:CVE-2020-15304
CNNVD:CNNVD-202006-1740
Industrial Light and Magic（LIM） OpenEXR是美国Industrial Light and Magic（LIM）公司的一种图像文件格式，适用于高动态范围（HDR）图像。
Industrial Light and Magic OpenEXR 2.5.2之前版版本中的IlmImf/ImfTiledInputFile.cpp文件的‘TiledInputFile::TiledInputFile()’函数存在代码问题漏洞。该漏洞源于网络系统或产品的代码开发过程中存在设计或实现不当的问题。
solution:Upgrade openexr openexr to a higher version than 2.5.2,and avoid the version (,2.5.2); Upgrade fedoraproject fedora to a higher version than 31,32,and avoid the version 31,32; Upgrade opensuse leap to a higher version than 15.1,15.2,and avoid the version 15.1,15.2