CVE-2013-1881

Currently unrated

Key Information:

Vendor
Gnome
Status
Librsvg
Vendor
CVE Published:
10 October 2013

Summary

GNOME libsvg before 2.39.0 allows remote attackers to read arbitrary files via an XML document containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.

References

http://ftp.gnome.org/pub/GNOME/sources/librsvg/2.39/librs...
x_refsource_CONFIRM
https://bugzilla.gnome.org/show_bug.cgi?id=691708
x_refsource_CONFIRM
http://secunia.com/advisories/55088
third-party-advisoryx_refsource_SECUNIA

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.