CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
AI Score
Confidence
Low
EPSS
Percentile
96.2%
Format string vulnerability in Inkscape before 0.45.1 allows user-assisted remote attackers to execute arbitrary code via format string specifiers in a URI, which is not properly handled by certain dialogs.
Vendor | Product | Version | CPE |
---|---|---|---|
ubuntu | ubuntu_linux | 5.10 | cpe:2.3:o:ubuntu:ubuntu_linux:5.10:*:*:*:*:*:*:* |
ubuntu | ubuntu_linux | 6.06 | cpe:2.3:o:ubuntu:ubuntu_linux:6.06:*:*:*:*:*:*:* |
ubuntu | ubuntu_linux | 6.06_lts | cpe:2.3:o:ubuntu:ubuntu_linux:6.06_lts:*:*:*:*:*:*:* |
ubuntu | ubuntu_linux | 6.10 | cpe:2.3:o:ubuntu:ubuntu_linux:6.10:*:i386:*:*:*:*:* |
inkscape | inkscape | 0.40 | cpe:2.3:a:inkscape:inkscape:0.40:*:*:*:*:*:*:* |
inkscape | inkscape | 0.41 | cpe:2.3:a:inkscape:inkscape:0.41:*:*:*:*:*:*:* |
inkscape | inkscape | 0.42 | cpe:2.3:a:inkscape:inkscape:0.42:*:*:*:*:*:*:* |
inkscape | inkscape | 0.42.1 | cpe:2.3:a:inkscape:inkscape:0.42.1:*:*:*:*:*:*:* |
inkscape | inkscape | 0.42.2 | cpe:2.3:a:inkscape:inkscape:0.42.2:*:*:*:*:*:*:* |
inkscape | inkscape | 0.43 | cpe:2.3:a:inkscape:inkscape:0.43:*:*:*:*:*:*:* |
secunia.com/advisories/24584
secunia.com/advisories/24597
secunia.com/advisories/24615
secunia.com/advisories/24661
secunia.com/advisories/24859
secunia.com/advisories/25072
sourceforge.net/project/shownotes.php?group_id=93438&release_id=495106
www.gentoo.org/security/en/glsa/glsa-200704-10.xml
www.mandriva.com/security/advisories?name=MDKSA-2007:069
www.novell.com/linux/security/advisories/2007_8_sr.html
www.securityfocus.com/archive/1/463710/100/0/threaded
www.securityfocus.com/bid/23070
www.securityfocus.com/bid/23138
www.ubuntu.com/usn/usn-438-1
www.vupen.com/english/advisories/2007/1059
exchange.xforce.ibmcloud.com/vulnerabilities/33163
issues.rpath.com/browse/RPL-1170