CVE-2005-3737 - Secunia Advisories - Vulnerability Information

CVE Reference: CVE-2005-3737
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE: CVE-2005-3737

Description: Buffer overflow in the SVG importer (style.cpp) of inkscape 0.41 through 0.42.2 might allow remote attackers to execute arbitrary code via a SVG file with long CSS style property values.

CVE Status: Candidate

References: UBUNTU http://www.ubuntulinux.org/usn/usn-217-1 SUSE http://www.novell.com/linux/security/advisories/2005_28_sr.html SREASON http://securityreason.com/securityalert/58 SAID Secunia Advisory: SA17651 Secunia Advisory: SA17662 Secunia Advisory: SA17778 Secunia Advisory: SA17882 MISC http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=330894 GENTOO http://www.gentoo.org/security/en/glsa/glsa-200511-22.xml DEBIAN http://www.debian.org/security/2005/dsa-916 CONFIRM http://cvs.sourceforge.net/viewcvs.py/inkscape/inkscape/src/style.cpp?r1=1.110&r2=1.110.2.1 BID 15507

Return to the previous page.