CVE-2011-3146 in GNOME librsvg
Summary
librsvg before 2.34.1 uses the node name to identify the type of node, which allows context-dependent attackers to cause a denial of service (NULL pointer dereference) and possibly execute arbitrary code via a SVG file with a node with the element name starting with "fe," which is misidentified as a RsvgFilterPrimitive.
Reservation
08/16/2011
Disclosure
09/05/2012
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 62024 | GNOME librsvg null pointer dereference | 476 | Not defined | Official fix | CVE-2011-3146 |