Mandrake Linux Security Advisory : dia (MDKSA-2005:187)

Joxean Koret discovered that the Python SVG import plugin in dia, a vector-oriented diagram editor, does not properly sanitise data read from an SVG file and is hence vulnerable to execute arbitrary Python code. The updated packages have been patched to address this issue. %NASLMINLEVEL 70300 C...

Debian DSA-847-1 : dia - missing input sanitising

Joxean Koret discovered that the Python SVG import plugin in dia, a vector-oriented diagram editor, does not properly sanitise data read from an SVG file and is hence vulnerable to execute arbitrary Python code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package...

GLSA-200510-06 : Dia: Arbitrary code execution through SVG import

The remote host is affected by the vulnerability described in GLSA-200510-06 Dia: Arbitrary code execution through SVG import Joxean Koret discovered that the SVG import plugin in Dia fails to properly sanitise data read from an SVG file. Impact : An attacker could create a specially crafted SVG...

[SECURITY] [DSA 847-1] New dia packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 847-1 [email protected] http://www.debian.org/security/ Martin Schulze October 8th, 2005 http://www.debian.org/security/faq -...

DSA-847-1 dia - missing input sanitising

Bulletin has no description...

Dia: Arbitrary code execution through SVG import

Background Dia is a gtk+ based diagram creation program released under the GPL license. Description Joxean Koret discovered that the SVG import plugin in Dia fails to properly sanitise data read from an SVG file. Impact An attacker could create a specially crafted SVG file, which, when imported...

CVE-2005-2966

The Python SVG import plugin diasvgimport.py for DIA 0.94 and earlier allows user-assisted attackers to execute arbitrary commands via a crafted SVG file...

CVE-2005-2966

The Python SVG import plugin diasvgimport.py for DIA 0.94 and earlier allows user-assisted attackers to execute arbitrary commands via a crafted SVG file...

CVE-2005-2966

CVE-2005-2966 concerns the Python SVG import plugin in dia (diasvg_import.py) affecting DIA 0.94 and earlier. A crafted SVG file could allow user‑assisted attackers to execute arbitrary Python code via the xfig/svg import path. Debian/DSA-847-1 and related advisories document three buffer‑overflo...

CVE-2005-2966

The Python SVG import plugin diasvgimport.py for DIA 0.94 and earlier allows user-assisted attackers to execute arbitrary commands via a crafted SVG file...

CVE-2005-2966

The Python SVG import plugin diasvgimport.py for DIA 0.94 and earlier allows user-assisted attackers to execute arbitrary commands via a crafted SVG file...