Input validation

GNOME librsvg version before commit c6ddf2ed4d768fd88adbea2b63f575cd523022ea contains a Improper input validation vulnerability in rsvg-io.c that can result in the victim's Windows username and NTLM password hash being leaked to remote attackers through SMB. This attack appear to be exploitable v...

CVE-2018-1000041

GNOME librsvg version before commit c6ddf2ed4d768fd88adbea2b63f575cd523022ea contains a Improper input validation vulnerability in rsvg-io.c that can result in the victim's Windows username and NTLM password hash being leaked to remote attackers through SMB. This attack appear to be exploitable v...

CVE-2018-1000041

CVE-2018-1000041 affects librsvg (renderer library used by the GNOME librsvg stack). The vulnerability is due to improper input validation in rsvg-io.c, which could cause leakage of a Windows username and NTLM password hash to remote attackers when processing a specially crafted SVG containing a ...

CVE-2018-1000041

GNOME librsvg version before commit c6ddf2ed4d768fd88adbea2b63f575cd523022ea contains a Improper input validation vulnerability in rsvg-io.c that can result in the victim's Windows username and NTLM password hash being leaked to remote attackers through SMB. This attack appear to be exploitable v...

CVE-2018-1000041

GNOME librsvg version before commit c6ddf2ed4d768fd88adbea2b63f575cd523022ea contains a Improper input validation vulnerability in rsvg-io.c that can result in the victim's Windows username and NTLM password hash being leaked to remote attackers through SMB. This attack appear to be exploitable v...

PT-2020-5329 · Gnome +7 · Librsvg +7

Name of the Vulnerable Software and Affected Versions: librsvg versions prior to 2.46.2 Description: The issue is related to a denial of service caused by a crafted SVG file with nested patterns. This file, when processed by the library, can lead to an exponential growth in the number of final...

openSUSE Security Update : librsvg (openSUSE-2017-915)

This update librsvg to version 2.40.18 fixes the following issues : Security issue fixed : - CVE-2017-11464: A SIGFPE is raised in the function boxblurline of rsvg-filter.c. bsc1049607 This update was imported from the SUSE:SLE-12-SP2:Update update project. %NASLMINLEVEL 70300 C Tenable Network...

SUSE SLED12 / SLES12 Security Update : librsvg (SUSE-SU-2017:2117-1)

This update librsvg to version 2.40.18 fixes the following issues: Security issue fixed : - CVE-2017-11464: A SIGFPE is raised in the function boxblurline of rsvg-filter.c. bsc1049607 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security...

SUSE-SU-2017:2117-1 Security update for librsvg

This update librsvg to version 2.40.18 fixes the following issues: Security issue fixed: - CVE-2017-11464: A SIGFPE is raised in the function boxblurline of rsvg-filter.c. bsc1049607...

MGASA-2017-0247 Updated librsvg packages fix security vulnerability

Division-by-zero in the Gaussian blur code CVE-2017-11464...

Fedora 25 : mingw-librsvg2 (2017-bcf1bc0775)

MinGW cross compiled librsvg 2.40.18 release, fixing CVE-2017-11464 division-by-zero in the Gaussian blur code. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format ...

Fedora 26 : mingw-librsvg2 (2017-ee04231942)

MinGW cross compiled librsvg 2.40.18 release, fixing CVE-2017-11464 division-by-zero in the Gaussian blur code. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format ...

CVE-2017-11464

A SIGFPE is raised in the function boxblurline of rsvg-filter.c in GNOME librsvg 2.40.17 during an attempted parse of a crafted SVG file, because of incorrect protection against division by zero...

GNOME librsvg 'rsvg-filter.c' denial of service vulnerability

GNOME librsvg is an open source SVG graphics development library for the GNOME project. A security vulnerability exists in the 'boxblurline' function of the rsvg-filter.c file in GNOME librsvg version 2.40.17. An attacker can exploit the vulnerability to cause a denial of service condition...

CVE-2017-11464

A SIGFPE is raised in the function boxblurline of rsvg-filter.c in GNOME librsvg 2.40.17 during an attempted parse of a crafted SVG file, because of incorrect protection against division by zero...

DEBIAN-CVE-2017-11464

A SIGFPE is raised in the function boxblurline of rsvg-filter.c in GNOME librsvg 2.40.17 during an attempted parse of a crafted SVG file, because of incorrect protection against division by zero...

UBUNTU-CVE-2017-11464

A SIGFPE is raised in the function boxblurline of rsvg-filter.c in GNOME librsvg 2.40.17 during an attempted parse of a crafted SVG file, because of incorrect protection against division by zero...

CVE-2017-11464

A SIGFPE is raised in the function boxblurline of rsvg-filter.c in GNOME librsvg 2.40.17 during an attempted parse of a crafted SVG file, because of incorrect protection against division by zero...

CVE-2017-11464

A SIGFPE is raised in the function boxblurline of rsvg-filter.c in GNOME librsvg 2.40.17 during an attempted parse of a crafted SVG file, because of incorrect protection against division by zero...

Design/Logic Flaw

A SIGFPE is raised in the function boxblurline of rsvg-filter.c in GNOME librsvg 2.40.17 during an attempted parse of a crafted SVG file, because of incorrect protection against division by zero...