Fedora 20 : mediawiki-1.21.11-1.fc20 (2014-7779)

bug 65839 SECURITY: Prevent external resources in SVG files. - bug 66428 MimeMagic: Don't seek before BOF. This has weird side effects like only extracting the tail of the file partially or not at all. Note that Tenable Network Security has extracted the preceding description block directly from...

Adobe SVG Viewer 3.0 ActiveX Control SRC Information Disclosure Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/13490/info The Adobe SVG Viewer ActiveX control is prone to an information disclosure vulnerability. Reports indicate that the Adobe SVG Viewer ActiveX control may be employed to disclose the existence of a target file...

Inkscape 0.41/0.42 SVG Image Buffer Overflow Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/15507/info Inkscape is prone to a buffer overflow vulnerability. This issue is due to a failure in the application to do proper bounds checking on user-supplied data before copying it into a finite sized buffer. When the...

Opera 10.63 - SVG Animation Element Denial of Service

No description provided by source. Exploit Title: Opera Denial of Service by SVG animation Element Date: 16, October 2010 Author: fla Software Link: http://www.opera.com/ Version: 10.63 and previous Tested on: Ubuntu 10.10 x64, Windows 7 x64 svg xmlns=http://www.w3.org/2000/svg...

Multiple Vendors (Firefox/Evince/EOG/Gimp) - (.SVG) Denial of Service PoC

No description provided by source. Malicious SVG file DoS The following applications were tested in their latest revisions: Firefox's browse for file, preview object on linux: affected evince on linux: affected eog on linux: affected gimp on linux: affected inkscape on linux: unaffected Microsoft...

Opera SVG Use After Free Vulnerability

No description provided by source. svg xmlns=http://www.w3.org/2000/svg xmlns:xlink=http://www.w0.org/1999/xlink g id=group defs clipPath id=clip-circle clip-path=urlclip-rect /clipPath clipPath id=clip-rect /clipPath /defs circle id=rect x=10 y=10 width=100 height=100 fill=green / /g script!CDAT...

Adobe SVG Viewer 3.0 postURL/getURL Restriction Bypass Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/8785/info Adobe SVG Viewer ASV is prone to an issue in the implementation of the getURL and postURL methods. These methods are designed to prevent access to URIs in a foreign domain or local files. However, by using a...

Trigerring Java Code from a SVG Image

No description provided by source...

Multiple Vendors Unspecified SVG File Processing - Denial of Service Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/30149/info Multiple vendors' SVG implementations are prone to an unspecified denial-of-service vulnerability. This issue arises when the software handles maliciously crafted SVG images. According to reports, the latest...

Opera Browser 10/11/12 (SVG layout) Memory Corruption (0day)

No description provided by source. Exploit for Opera Browser 10/11/12 SVG layout Memory Corruption 0day Vulnerability: Discovered: 2010-10-13 Patched: 0day Tested on: v10.xx v10.50, v10.51, v10.52, v10.53, v10.54, v10.6, v10.61, v10.62 and v10.63 v11.xx v11.00, v11.01, v11.10, v11.11, v11.50 and...

Squiggle 1.7 SVG Browser Java Code Execution

No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core'...

FangMail储存型XSS

简要描述： http://www.fangmail.net/abous/Successcase.html 近10w客户？ 详细说明： 邮件正文插入 即可触发。 漏洞证明：...

Coremail 邮件系统存储型 XSS

简要描述： 设计疏忽导致可执行恶意 JavaScript 代码。 详细说明： 我原以为和 WooYun: Coremail邮件系统存储型XSS之二 这里是同一种文件漏洞，问过之后，了解到不是同一个。 本漏洞是直接预览 SVG 图片附件，会触发 SVG 内部脚本。新版本 Coremail “除了部分格式的图片和PDF”，不知道有没有修复这个问题，姑且发出来吧。 如图，用户预览附件即会触发 XSS。 （不嫌麻烦的话可以配合之前获取 sid/mid 的漏洞，在正文内插入链接、跳转到附件 SVG 的预览地址，作为伪装。） 漏洞证明：...

openSUSE Security Update : seamonkey (openSUSE-SU-2012:0007-1)

seamonkey version 2.6 fixes several security issues : - MFSA 2011-53/CVE-2011-3660: Miscellaneous memory safety hazards - MFSA 2011-54/CVE-2011-3661: Potentially exploitable crash in the YARR regular expression library - MFSA 2011-55/CVE-2011-3658: nsSVGValue out-of-bounds access - MFSA...

openSUSE Security Update : MozillaFirefox (openSUSE-SU-2011:0957-2)

Mozilla Firefox was updated to version 6. It brings new features, fixes bugs and security issues. Following security issues were fixed: http://www.mozilla.org/security/announce/2011/mfsa2011-29.html Mozilla Foundation Security Advisory 2011-29 MFSA 2011-29 dbg114-MozillaFirefox-5020...

openSUSE Security Update : opera (openSUSE-SU-2011:1172-1)

This update of Opera fixes a memory flaw in the code that processes SVG content which could be exploited by attackers to execute arbitrary code through specially crafted websites. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...

openSUSE Security Update : gdk-pixbuf-loader-rsvg (openSUSE-SU-2011:1090-1)

Specially crafted SVG files could make librsvg dereference a function pointer which potentially allows to execute arbitrary code CVE-2011-3146. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...

openSUSE Security Update : chromium (openSUSE-SU-2013:0236-1)

Update to 26.0.1383 - Security fixes bnc798326 - CVE-2012-5145: Use-after-free in SVG layout - CVE-2012-5146: Same origin policy bypass with malformed URL - CVE-2012-5147: Use-after-free in DOM handling - CVE-2012-5148: Missing filename sanitization in hyphenation support - CVE-2012-5149: Integer...

openSUSE Security Update : MozillaFirefox (openSUSE-SU-2012:1064-1)

Mozilla Firefox, Thunderbird, xulrunner, seamonkey 15.0 update bnc777588 - MFSA 2012-57/CVE-2012-1970 Miscellaneous memory safety hazards - MFSA 2012-58/CVE-2012-1972/CVE-2012-1973/CVE-2012-1974/CVE-20 12-1975 CVE-2012-1976/CVE-2012-3956/CVE-2012-3957/CVE-2012-3958/ CVE-2012-3959...

openSUSE Security Update : opera (openSUSE-SU-2012:1481-1)

This Opera 12.10 security update fixes following security issues : -an issue that could cause Opera not to correctly check for certificate revocation; -an issue where CORS requests could incorrectly retrieve contents of cross origin pages; -an issue where data URIs could be used to facilitate...