CVE-2011-3146 in GNOME librsvg
요약 (영어)
librsvg before 2.34.1 uses the node name to identify the type of node, which allows context-dependent attackers to cause a denial of service (NULL pointer dereference) and possibly execute arbitrary code via a SVG file with a node with the element name starting with "fe," which is misidentified as a RsvgFilterPrimitive.
예약하다
2011. 08. 16.
공개
2012. 09. 05.
엔트리
VulDB provides additional information and datapoints for this CVE:
| 아이디 | 취약성 | CWE | 악용 | 대책 | CVE |
|---|---|---|---|---|---|
| 62024 | GNOME librsvg 서비스 거부 | 476 | 정의되지 않음 | 공식 수정 | CVE-2011-3146 |