269 matches found
GLSA-200510-06 : Dia: Arbitrary code execution through SVG import
The remote host is affected by the vulnerability described in GLSA-200510-06 Dia: Arbitrary code execution through SVG import Joxean Koret discovered that the SVG import plugin in Dia fails to properly sanitise data read from an SVG file. Impact : An attacker could create a specially crafted SVG...
[SECURITY] [DSA 847-1] New dia packages fix arbitrary code execution
-------------------------------------------------------------------------- Debian Security Advisory DSA 847-1 [email protected] http://www.debian.org/security/ Martin Schulze October 8th, 2005 http://www.debian.org/security/faq -...
DSA-847-1 dia - missing input sanitising
Bulletin has no description...
Dia: Arbitrary code execution through SVG import
Background Dia is a gtk+ based diagram creation program released under the GPL license. Description Joxean Koret discovered that the SVG import plugin in Dia fails to properly sanitise data read from an SVG file. Impact An attacker could create a specially crafted SVG file, which, when imported...
CVE-2005-2966
The Python SVG import plugin diasvgimport.py for DIA 0.94 and earlier allows user-assisted attackers to execute arbitrary commands via a crafted SVG file...
CVE-2005-2966
The Python SVG import plugin diasvgimport.py for DIA 0.94 and earlier allows user-assisted attackers to execute arbitrary commands via a crafted SVG file...
CVE-2005-2966
The Python SVG import plugin diasvgimport.py for DIA 0.94 and earlier allows user-assisted attackers to execute arbitrary commands via a crafted SVG file...
CVE-2005-2966
CVE-2005-2966 concerns the Python SVG import plugin in dia (diasvg_import.py) affecting DIA 0.94 and earlier. A crafted SVG file could allow user‑assisted attackers to execute arbitrary Python code via the xfig/svg import path. Debian/DSA-847-1 and related advisories document three buffer‑overflo...
