|
|
| |
|
| |
inkscape: denial of service
| Package(s): | inkscape |
CVE #(s): | CVE-2012-5656
|
| Created: | January 7, 2013 |
Updated: | February 14, 2013 |
| Description: |
From the Red Hat bugzilla:
An XML eXternal Entity (XXE) flaw was found in the way Inkscape, a vector-based drawing program using SVG as its native file format performed rasterization of certain SVG images. A remote attacker could provide a specially-crafted SVG image that, when opened in inkscape would lead to arbitrary local file disclosure or denial of service. |
| Alerts: |
|
( Log in to post comments)
|
|
|