Back to search
CVE-2011-3146
Published: Sep 5, 2012
Modified: Sep 16, 2024
PUBLISHED
Description
librsvg before 2.34.1 uses the node name to identify the type of node, which allows context-dependent attackers to cause a denial of service (NULL pointer dereference) and possibly execute arbitrary code via a SVG file with a node with the element name starting with "fe," which is misidentified as a RsvgFilterPrimitive.
| Vendor | Product | Versions |
|---|---|---|
n/a | n/a | affected n/a |
References
http://ftp.gnome.org/pub/GNOME/sources/librsvg/2.34/librsvg-2.34.1.news
x_refsource_CONFIRM
45877
third-party-advisory
x_refsource_SECUNIA
https://bugs.launchpad.net/ubuntu/+source/librsvg/+bug/825497
x_refsource_MISC
https://bugzilla.redhat.com/show_bug.cgi?id=734936
x_refsource_MISC
RHSA-2011:1289
vendor-advisory
x_refsource_REDHAT
https://bugzilla.gnome.org/show_bug.cgi?id=658014
x_refsource_CONFIRM
FEDORA-2011-12312
vendor-advisory
x_refsource_FEDORA
FEDORA-2011-12301
vendor-advisory
x_refsource_FEDORA
FEDORA-2011-12271
vendor-advisory
x_refsource_FEDORA
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now