Vulnerability CVE-2007-1463: Information

Description

Format string vulnerability in Inkscape before 0.45.1 allows user-assisted remote attackers to execute arbitrary code via format string specifiers in a URI, which is not properly handled by certain dialogs.

Severity: MEDIUM (6.8)

References to Advisories, Solutions, and Tools

1. Affected configurations:

   1. Configuration 1

      Running on/with:

      cpe:2.3:o:ubuntu:ubuntu_linux:5.10:*:*:*:*:*:*:*

      ---

      Running on/with:

      cpe:2.3:o:ubuntu:ubuntu_linux:6.06:*:*:*:*:*:*:*

      ---

      Running on/with:

      cpe:2.3:o:ubuntu:ubuntu_linux:6.06_lts:*:*:*:*:*:*:*

      ---

      Running on/with:

      cpe:2.3:o:ubuntu:ubuntu_linux:6.10:*:i386:*:*:*:*:*

      ---

      cpe:2.3:a:inkscape:inkscape:0.40:*:*:*:*:*:*:*

      ---

      cpe:2.3:a:inkscape:inkscape:0.41:*:*:*:*:*:*:*

      ---

      cpe:2.3:a:inkscape:inkscape:0.42:*:*:*:*:*:*:*

      ---

      cpe:2.3:a:inkscape:inkscape:0.42.1:*:*:*:*:*:*:*

      ---

      cpe:2.3:a:inkscape:inkscape:0.42.2:*:*:*:*:*:*:*

      ---

      cpe:2.3:a:inkscape:inkscape:0.43:*:*:*:*:*:*:*

      ---

      cpe:2.3:a:inkscape:inkscape:0.44:*:*:*:*:*:*:*

      ---