EUVD-2005-2966

Malware in sbrugna...

Mandrake Linux Security Advisory : dia (MDKSA-2005:187)

Joxean Koret discovered that the Python SVG import plugin in dia, a vector-oriented diagram editor, does not properly sanitise data read from an SVG file and is hence vulnerable to execute arbitrary Python code. The updated packages have been patched to address this issue. %NASLMINLEVEL 70300 C...

CVE-2005-2966

The Python SVG import plugin diasvgimport.py for DIA 0.94 and earlier allows user-assisted attackers to execute arbitrary commands via a crafted SVG file...