CVE-2005-3737
NoneCVSS
—
EPSS
13.4%
Published
Nov 22, 2005
CISA due date
—
The record
Buffer overflow in the SVG importer (style.cpp) of inkscape 0.41 through 0.42.2 might allow remote attackers to execute arbitrary code via a SVG file with long CSS style property values.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Debian:10 | inkscape | 0 | 0.43-1 |
| Debian:11 | inkscape | 0 | 0.43-1 |
| Debian:12 | inkscape | 0 | 0.43-1 |
| Debian:13 | inkscape | 0 | 0.43-1 |
| Debian:3.1 | inkscape | 0 | 0.41-4.99.sarge2 |
| Debian:4.0 | inkscape | 0 | 0.43-0.0etch1 |