11170 matches found
qt5-qtsvg: Invalid parsing of malformed url reference resulting in a denial of service
An issue was discovered in Qt before 5.11.3. A malformed SVG image causes a segmentation fault in qsvghandler.cpp...
CVE-2020-11887
svg2png 4.1.1 allows XSS with resultant SSRF via JavaScript inside an SVG document...
CVE-2020-11887
svg2png 4.1.1 allows XSS with resultant SSRF via JavaScript inside an SVG document...
Cross site scripting
svg2png 4.1.1 allows XSS with resultant SSRF via JavaScript inside an SVG document...
The vulnerability of the SVGKeyValuePairs function in the ImageMagick console-based graphics editor allows a hacker to trigger a service failure.
The vulnerability of the SVGKeyValuePairs function coders/svg.c in the ImageMagick console-based graphics editor is related to resource management errors. Exploiting this vulnerability can allow a malicious actor to cause service interruptions using a specially crafted image...
EulerOS 2.0 SP3 : qt (EulerOS-SA-2020-1431)
According to the version of the qt packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - Qt through 5.14 allows an exponential XML entity expansion attack via a crafted SVG document that is mishandled in QXmlStreamReader, a related issue to...
Topcoder: SVG file upload leads to XML injection
Summary: Upload Avatar option allows the user to upload image/ . Thus enabling the upload of many file formats including SVG files MIME type: image/svg+xml SVG files are XML based graphics files in 2D images. Thus, this opens up an attack vector to upload specially crafted malicious SVG files. Th...
Arbitrary Code Execution
firefox / thunderbird is vulnerable to arbitrary code execution. A web page containing a malicious Scalable Vector Graphics SVG image file could cause Firefox to crash or, potentially, execute arbitrary code with the privileges of the user running Firefox...
Information Disclosure
firefox is vulnerable to information disclosure. The vulnerability exists as through the way Firefox parsed certain Scalable Vector Graphics SVG image files. A web page containing a malicious SVG image file could cause an information leak, or cause Firefox to crash or, potentially, execute...
Arbitrary Code Execution
firefox is vulnerable to arbitrary code execution. The vulnerability exists as two flaws were found in the way Firefox parsed certain Scalable Vector Graphics SVG image files. A web page containing a malicious SVG image file could cause an information leak, or cause Firefox to crash or,...
Arbitrary Code Execution
firefox is vulnerable to arbitrary code execution. The vulnerability exists as a flaw was found in the way Firefox parsed certain Scalable Vector Graphics SVG image files that contained eXtensible Style Sheet language Transformations XSLT. A web page containing a malicious SVG image file could...
Arbitrary Code Execution
firefox is vulnerable to arbitrary code execution. A dangling pointer flaw was found in the Firefox Scalable Vector Graphics SVG text manipulation routine. A web page containing a malicious SVG image could cause Firefox to crash or, potentially, execute arbitrary code with the privileges of the...
Use-after-free
WebKitGTK+ is vulnerable to use-after-free. It is due to flaws caused via a 1 font-face or 2 use element in an SVG document, allowing an attacker to use malicious web content to crash or, potentially, execute arbitrary code with the privileges of the user running the application...
Use After Free
kdegraphics is vulnerable to Use After Free. A use-after-free vulnerability in the garbage-collection implementation in WebCore in WebKit allows a remote attacker to execute arbitrary code or cause a denial of service heap corruption and application crash via an SVG animation element...
Remote Code Execution (RCE)
The kdegraphics is vulnerable to Remote Code Execution RCE. A NULL pointer dereference flaw was found in the KDE, KSVG SVGList interface implementation. A remote attacker could create a specially-crafted SVG image, which once opened by an unsuspecting user, would cause memory corruption, leading ...
qt security update
1:4.8.7-8 - Fix QImage allocation failure in qgifhandler Resolves: bz1667863 - Fix QTgaFile CPU exhaustion Resolves: bz1667879 - Fix QBmpHandler segmentation fault on malformed BMP file Resolves: bz1667862 1:4.8.7-7 - Fix crash when parsing malformed url reference in svg Resolves: bz1667882...
MGASA-2020-0159 Updated librsvg packages fix security vulnerability
The updated packages fix a security vulnerability: In xml.rs in GNOME librsvg before 2.46.2, a crafted SVG file with nested patterns can cause denial of service when passed to the library for processing. The attacker constructs pattern elements so that the number of final rendered objects grows...
Updated librsvg packages fix security vulnerability
The updated packages fix a security vulnerability: In xml.rs in GNOME librsvg before 2.46.2, a crafted SVG file with nested patterns can cause denial of service when passed to the library for processing. The attacker constructs pattern elements so that the number of final rendered objects grows...
