Description
BUGTRAQ ID: 30149
CNCAN ID：CNCAN-2008071005
多个供应商SVG实现存在未明拒绝服务攻击。
当处理特殊构建的SVG图像时可使应用程序崩溃，触发拒绝服务。
根据symantec报告，受此漏洞影响的产品包括Firefox, Evince, EoG和GIMP
Mozilla Firefox 3.0
GNOME Eye of GNOME 2.22.3
GNOME Evince 2.23
GIMP GIMP 2.4.6
目前没有解决方案提供：
<a href=http://www.gnome.org/projects/evince/ target=_blank>http://www.gnome.org/projects/evince/</a>
<a href=http://www.gnome.org/projects/eog/ target=_blank>http://www.gnome.org/projects/eog/</a>
<a href=http://www.gimp.org/ target=_blank>http://www.gimp.org/</a>
<a href=http://www.mozilla.org/ target=_blank>http://www.mozilla.org/</a>
{"sourceData": "\n \u53ef\u53c2\u8003\u5982\u4e0b\u6d4b\u8bd5\u7a0b\u5e8f\uff1a\r\nhttp://www.securityfocus.com/data/vulnerabilities/exploits/30149.svg\n ", "status": "poc,details", "description": "BUGTRAQ ID: 30149\r\nCNCAN ID\uff1aCNCAN-2008071005\r\n\r\n\u591a\u4e2a\u4f9b\u5e94\u5546SVG\u5b9e\u73b0\u5b58\u5728\u672a\u660e\u62d2\u7edd\u670d\u52a1\u653b\u51fb\u3002\r\n\u5f53\u5904\u7406\u7279\u6b8a\u6784\u5efa\u7684SVG\u56fe\u50cf\u65f6\u53ef\u4f7f\u5e94\u7528\u7a0b\u5e8f\u5d29\u6e83\uff0c\u89e6\u53d1\u62d2\u7edd\u670d\u52a1\u3002\r\n\u6839\u636esymantec\u62a5\u544a\uff0c\u53d7\u6b64\u6f0f\u6d1e\u5f71\u54cd\u7684\u4ea7\u54c1\u5305\u62ecFirefox, Evince, EoG\u548cGIMP\n\nMozilla Firefox 3.0\r\nGNOME Eye of GNOME 2.22.3 \r\nGNOME Evince 2.23\r\nGIMP GIMP 2.4.6\n \u76ee\u524d\u6ca1\u6709\u89e3\u51b3\u65b9\u6848\u63d0\u4f9b\uff1a\r\n<a href=http://www.gnome.org/projects/evince/ target=_blank>http://www.gnome.org/projects/evince/</a>\r\n<a href=http://www.gnome.org/projects/eog/ target=_blank>http://www.gnome.org/projects/eog/</a>\r\n<a href=http://www.gimp.org/ target=_blank>http://www.gimp.org/</a>\r\n<a href=http://www.mozilla.org/ target=_blank>http://www.mozilla.org/</a>", "sourceHref": "https://www.seebug.org/vuldb/ssvid-3589", "reporter": "Root", "href": "https://www.seebug.org/vuldb/ssvid-3589", "type": "seebug", "viewCount": 4, "references": [], "lastseen": "2017-11-19T21:40:32", "published": "2008-07-10T00:00:00", "cvelist": [], "id": "SSV:3589", "enchantments_done": [], "modified": "2008-07-10T00:00:00", "title": "\u591a\u4e2a\u4f9b\u5e94\u5546\u5904\u7406SVG\u6587\u4ef6\u62d2\u7edd\u670d\u52a1\u6f0f\u6d1e", "cvss": {"score": 0.0, "vector": "NONE"}, "bulletinFamily": "exploit", "enchantments": {"score": {"value": 0.5, "vector": "NONE"}, "dependencies": {}, "backreferences": {}, "exploitation": null, "vulnersScore": 0.5}, "immutableFields": [], "cvss2": {}, "cvss3": {}, "_state": {"dependencies": 1647555219, "score": 1659785532, "epss": 1678851499}}
{}
多个供应商处理SVG文件拒绝服务漏洞