DEBIAN-CVE-2012-5656

The rasterization process in Inkscape before 0.48.4 allows local users to read arbitrary files via an external entity in a SVG file, aka an XML external entity XXE injection attack...

CVE-2012-5656

The rasterization process in Inkscape before 0.48.4 allows local users to read arbitrary files via an external entity in a SVG file, aka an XML external entity XXE injection attack...

CVE-2012-5656

CVE-2012-5656 concerns Inkscape ≤ 0.48.3 (up to 0.48.4) where the rasterization of SVGs can be abused via an XML external entity (XXE) in a crafted SVG, allowing a local attacker to read arbitrary files. The issue stems from the rasterization path processing external entities. Public advisories c...

CVE-2012-5656

The rasterization process in Inkscape before 0.48.4 allows local users to read arbitrary files via an external entity in a SVG file, aka an XML external entity XXE injection attack...

CVE-2012-5656

The rasterization process in Inkscape before 0.48.4 allows local users to read arbitrary files via an external entity in a SVG file, aka an XML external entity XXE injection attack...

CVE-2012-5656: Improper Restriction of XML External Entity Reference

The rasterization process in Inkscape before 0.48.4 allows local users to read arbitrary files via an external entity in a SVG file, aka an XML external entity XXE injection attack...

CVE-2012-5656

The rasterization process in Inkscape before 0.48.4 allows local users to read arbitrary files via an external entity in a SVG file, aka an XML external entity XXE injection attack...

PT-2013-1827 · Inkscape +1 · Inkscape +1

Name of the Vulnerable Software and Affected Versions: Inkscape versions prior to 0.48.4 Description: The issue concerns an XML external entity XXE injection attack in the rasterization process. This allows local users to read arbitrary files via an external entity in a SVG file. Recommendations:...

Fedora Core 6 : freetype-2.2.1-17.fc6 (2007-561)

This update fixes a bug in FreeType font rasterization engine that could cause a carefully crafted TrueType font to crash applications trying to use it. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempt...