CVE-2012-5656

Опубликовано: 18 янв. 2013

Источник: debian

Описание

The rasterization process in Inkscape before 0.48.4 allows local users to read arbitrary files via an external entity in a SVG file, aka an XML external entity (XXE) injection attack.

Пакеты

Пакет	Статус	Версия исправления	Релиз	Тип
inkscape	fixed	0.48.3.1-1.2		package
inkscape	no-dsa		squeeze	package

Связанные уязвимости

CVE-2012-5656

CVSS3: 5.5

ubuntu

около 13 лет назад

The rasterization process in Inkscape before 0.48.4 allows local users to read arbitrary files via an external entity in a SVG file, aka an XML external entity (XXE) injection attack.

CVE-2012-5656

redhat

около 13 лет назад

The rasterization process in Inkscape before 0.48.4 allows local users to read arbitrary files via an external entity in a SVG file, aka an XML external entity (XXE) injection attack.

CVE-2012-5656

CVSS3: 5.5

nvd

около 13 лет назад

The rasterization process in Inkscape before 0.48.4 allows local users to read arbitrary files via an external entity in a SVG file, aka an XML external entity (XXE) injection attack.

GHSA-r89j-vhg3-xw33

CVSS3: 5.5

github

больше 3 лет назад

The rasterization process in Inkscape before 0.48.4 allows local users to read arbitrary files via an external entity in a SVG file, aka an XML external entity (XXE) injection attack.