CVE-2005-3737 Buffer overflow in the SVG importer (style.cpp) of inkscape 0.41 through 0.42.2 might allow remote attackers to execute arbitrary code via a SVG file with long CSS style property values.
MediumCVSS 5.1
EPSS 13.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Buffer overflow in the SVG importer (style.cpp) of inkscape 0.41 through 0.42.2 might allow remote attackers to execute arbitrary code via a SVG file with long CSS style property values.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| inkscape | = 0.41 | No fix listed |
| inkscape | = 0.42 | No fix listed |
| inkscape | = 0.42.1 | No fix listed |
| inkscape | = 0.42.2 | No fix listed |
| debian/inkscape(Debian:12) | < 0.43-1 | 0.43-1 |
| debian/inkscape(Debian:13) | < 0.43-1 | 0.43-1 |
| debian/inkscape(Debian:14) | < 0.43-1 | 0.43-1 |
References
- Debian Security Tracker CVE-2005-3737 vendor-advisory
- bugs.debian.org issue-tracking
- bugs.debian.org
- cvs.sourceforge.net
- 17651 third-party-advisory vendor-advisory
- 17662 patch third-party-advisory vendor-advisory
- 17778 third-party-advisory
- 17882 third-party-advisory
- 58 third-party-advisory
- DSA-916 vendor-advisory
- GLSA-200511-22 vendor-advisory
- SUSE-SR:2005:028 vendor-advisory
- 15507 exploit patch vdb-entry
- USN-217-1 vendor-advisory
- ADV-2005-2511 vdb-entry