257 matches found
DEBIAN-CVE-2007-1463
Format string vulnerability in Inkscape before 0.45.1 allows user-assisted remote attackers to execute arbitrary code via format string specifiers in a URI, which is not properly handled by certain dialogs...
CVE-2007-1463
Format string vulnerability in Inkscape before 0.45.1 allows user-assisted remote attackers to execute arbitrary code via format string specifiers in a URI, which is not properly handled by certain dialogs...
DEBIAN-CVE-2007-1464
Format string vulnerability in the whiteboard Jabber protocol in Inkscape before 0.45.1 allows user-assisted remote attackers to execute arbitrary code via unspecified vectors...
CVE-2007-1464
Format string vulnerability in the whiteboard Jabber protocol in Inkscape before 0.45.1 allows user-assisted remote attackers to execute arbitrary code via unspecified vectors...
CVE-2007-1464
CVE-2007-1464 refers to a format-string vulnerability in Inkscape’s Jabber whiteboard protocol (remote code execution) and is accompanied by CVE-2007-1463 describing a separate format-string issue in Inkscape URIs. Affected product: Inkscape (pre-0.45.1). Root cause: improper handling of format s...
CVE-2007-1464
Format string vulnerability in the whiteboard Jabber protocol in Inkscape before 0.45.1 allows user-assisted remote attackers to execute arbitrary code via unspecified vectors...
CVE-2007-1463
Format string vulnerability in Inkscape before 0.45.1 allows user-assisted remote attackers to execute arbitrary code via format string specifiers in a URI, which is not properly handled by certain dialogs...
CVE-2007-1463
Inkscape before 0.45.1 contains a format string vulnerability in URIs parsed by certain dialogs, allowing user-assisted remote code execution. Public references in OpenVAS/Nessus advisories map this to CVE-2007-1463; affected OS advisories (MDKSA-2007:069, USN-438-1, Gentoo GLSA 200704-10, openSU...
CVE-2007-1463
Format string vulnerability in Inkscape before 0.45.1 allows user-assisted remote attackers to execute arbitrary code via format string specifiers in a URI, which is not properly handled by certain dialogs...
USN-438-1: Inkscape vulnerability
A flaw was discovered in Inkscape's use of format strings. If a user were tricked into opening a specially crafted URI in Inkscape, a remote attacker could execute arbitrary code with user privileges...
Debian DSA-916-1 : inkscape - buffer overflow
Several vulnerabilities have been discovered in Inkscape, a vector-based drawing program. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2005-3737 Joxean Koret discovered a buffer overflow in the SVG parsing routines that can lead to the execution of...
Ubuntu 5.04 : inkscape vulnerability (USN-223-1)
Javier Fernandez-Sanguino Pena discovered that Inkscape's ps2epsi.sh script, which converts PostScript files to Encapsulated PostScript format, creates a temporary file in an insecure way. A local attacker could exploit this with a symlink attack to create or overwrite arbitrary files with the...
Ubuntu 5.10 : inkscape vulnerability (USN-217-1)
A buffer overflow has been discovered in the SVG importer of Inkscape. By tricking an user into opening a specially crafted SVG image this could be exploited to execute arbitrary code with the privileges of the Inkscape user. Note that Tenable Network Security has extracted the preceding...
[SECURITY] [DSA 916-1] New Inkscape packages fix arbitrary code execution
-------------------------------------------------------------------------- Debian Security Advisory DSA 916-1 [email protected] http://www.debian.org/security/ Martin Schulze December 7th, 2005 http://www.debian.org/security/faq -...
[SECURITY] [DSA 916-1] New Inkscape packages fix arbitrary code execution
-------------------------------------------------------------------------- Debian Security Advisory DSA 916-1 [email protected] http://www.debian.org/security/ Martin Schulze December 7th, 2005 http://www.debian.org/security/faq -...
DSA-916-1 inkscape - buffer overflow
Bulletin has no description...
GLSA-200511-22 : Inkscape: Buffer overflow
The remote host is affected by the vulnerability described in GLSA-200511-22 Inkscape: Buffer overflow Joxean Koret has discovered that Inkscape incorrectly allocates memory when opening an SVG file, creating the possibility of a buffer overflow if the SVG file being opened is specially crafted...
USN-223-1: Inkscape vulnerability
Javier Fernández-Sanguino Peña discovered that Inkscape's ps2epsi.sh script, which converts PostScript files to Encapsulated PostScript format, creates a temporary file in an insecure way. A local attacker could exploit this with a symlink attack to create or overwrite arbitrary files with the...
