CVE

Id
77513  
CVE No.
CVE-2015-0250  
Status
Candidate  
Description
XML external entity (XXE) vulnerability in the SVG to (1) PNG and (2) JPG conversion classes in Apache Batik 1.x before 1.8 allows remote attackers to read arbitrary files or cause a denial of service via a crafted SVG file.  
Phase
Assigned (20141118)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
709222 77513 CVE-2015-0250 FULLDISC:20150322 [CVE-2015-0250] Apache Batik Information Disclosure Vulnerability (XXE Injection)  View
709223 77513 CVE-2015-0250 URL:http://seclists.org/fulldisclosure/2015/Mar/142  View
709224 77513 CVE-2015-0250 MISC:http://packetstormsecurity.com/files/130964/Apache-Batik-XXE-Injection.html  View
709225 77513 CVE-2015-0250 CONFIRM:http://xmlgraphics.apache.org/security.html  View
709226 77513 CVE-2015-0250 CONFIRM:http://advisories.mageia.org/MGASA-2015-0138.html  View
709227 77513 CVE-2015-0250 CONFIRM:http://www-01.ibm.com/support/docview.wss?uid=swg21963275  View
709228 77513 CVE-2015-0250 MANDRIVA:MDVSA-2015:203  View
709229 77513 CVE-2015-0250 URL:http://www.mandriva.com/security/advisories?name=MDVSA-2015:203  View
709230 77513 CVE-2015-0250 REDHAT:RHSA-2016:0041  View
709231 77513 CVE-2015-0250 URL:http://rhn.redhat.com/errata/RHSA-2016-0041.html  View
709232 77513 CVE-2015-0250 REDHAT:RHSA-2016:0042  View
709233 77513 CVE-2015-0250 URL:http://rhn.redhat.com/errata/RHSA-2016-0042.html  View
709234 77513 CVE-2015-0250 UBUNTU:USN-2548-1  View
709235 77513 CVE-2015-0250 URL:http://www.ubuntu.com/usn/USN-2548-1  View
709236 77513 CVE-2015-0250 SECTRACK:1032781  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
5702 JVNDB-2015-001022 Adobe Flash Player および Adobe AIR における重要なキーストローク情報を取得される脆弱性 Adobe Flash Player および Adobe AIR には、重要なキーストローク情報を取得される脆弱性が存在します。 CVE-2015-0302 77513 5 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-001022.html  View