PT-2016-3812

Name of the Vulnerable Software and Affected Versions librsvg versions prior to 2.40.7 Description The issue allows context-dependent attackers to cause a denial of service, specifically an out-of-bounds heap read, by exploiting the rsvg node poly build path function in rsvg-shapes.c. This can be...

PT-2017-8920

Name of the Vulnerable Software and Affected Versions librsvg2 version 2.40.2 Description The issue allows remote attackers to cause a denial of service, specifically an out-of-bounds read, by providing a crafted svg file. This is related to the rsvg pattern fix fallback function in rsvg-paint...

openSUSE Security Update : gdk-pixbuf-loader-rsvg (openSUSE-SU-2011:1090-1)

Specially crafted SVG files could make librsvg dereference a function pointer which potentially allows to execute arbitrary code CVE-2011-3146. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...

openSUSE Security Update : gdk-pixbuf-loader-rsvg (openSUSE-SU-2011:1090-1)

Specially crafted SVG files could make librsvg dereference a function pointer which potentially allows to execute arbitrary code CVE-2011-3146. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...

PT-2016-5895

Name of the Vulnerable Software and Affected Versions librsvg version 2.40.2 Description The issue allows context-dependent attackers to cause a denial of service, resulting in stack consumption and application crash, via circular definitions in an SVG document. This occurs due to the rsvg css...