Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2005-2966
HistoryOct 05, 2005 - 9:02 p.m.

CVE-2005-2966

2005-10-0521:02:00
[email protected]
web.nvd.nist.gov

5.1 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:P/I:P/A:P

7.1 High

AI Score

Confidence

Low

0.037 Low

EPSS

Percentile

91.8%

JSON

The Python SVG import plugin (diasvg_import.py) for DIA 0.94 and earlier allows user-assisted attackers to execute arbitrary commands via a crafted SVG file.

Affected configurations

NVD
Node
diadiaRange≤0.94
OR
diadiaMatch0.91
OR
diadiaMatch0.92.2
OR
diadiaMatch0.93

Related

nessus 5
debian 4
debiancve 1
cve 1
gentoo 1
openvas 6
ubuntu 1
ubuntucve 1
securityvulns 1
cvelist 1
nessus
nessus
Mandrake Linux Security Advisory : dia (MDKSA-2005:187)
2006-01-15 00:00:00
Debian DSA-847-1 : dia - missing input sanitising
2005-10-11 00:00:00
GLSA-200510-06 : Dia: Arbitrary code execution through SVG import
2005-10-11 00:00:00
debian
debian
[SECURITY] [DSA 1025-1] New dia packages fix arbitrary code execution
2006-04-06 07:16:58
[SECURITY] [DSA 847-1] New dia packages fix arbitrary code execution
2005-10-08 06:49:01
[SECURITY] [DSA 1025-1] New dia packages fix arbitrary code execution
2006-04-06 07:16:58
debiancve
debiancve
CVE-2005-2966
2005-10-05 21:02:00
cve
cve
CVE-2005-2966
2005-10-05 21:02:00
gentoo
gentoo
Dia: Arbitrary code execution through SVG import
2005-10-06 00:00:00
openvas
openvas
Debian: Security Advisory (DSA-847-1)
2008-01-17 00:00:00
Ubuntu: Security Advisory (USN-193-1)
2022-08-26 00:00:00
Gentoo Security Advisory GLSA 200510-06 (dia)
2008-09-24 00:00:00
ubuntu
ubuntu
dia vulnerability
2005-10-04 00:00:00
ubuntucve
ubuntucve
CVE-2005-2966
2005-10-05 00:00:00
securityvulns
securityvulns
[Full-disclosure] [USN-193-1] dia vulnerability
2005-10-04 00:00:00
cvelist
cvelist
CVE-2005-2966
2005-10-05 04:00:00

5.1 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:P/I:P/A:P

7.1 High

AI Score

Confidence

Low

0.037 Low

EPSS

Percentile

91.8%

JSON
Related for NVD:CVE-2005-2966
nessus5debian4debiancve1cve1gentoo1openvas6ubuntu1ubuntucve1securityvulns1cvelist1