NVD

Id
9836  
Name
CVE-2011-3146  
Description
librsvg before 2.34.1 uses the node name to identify the type of node, which allows context-dependent attackers to cause a denial of service (NULL pointer dereference) and possibly execute arbitrary code via a SVG file with a node with the element name starting with "fe," which is misidentified as a RsvgFilterPrimitive.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-07  
Published
2012-09-05  
Modified Date
2012-09-13  
Seq
2011-3146  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
56437 9836 CVE-2011-3146 http://ftp.gnome.org/pub/GNOME/sources/librsvg/2.34/librsvg-2.34.1.news  View
56438 9836 CVE-2011-3146 http://git.gnome.org/browse/librsvg/commit/?id=34c95743ca692ea0e44778e41a7c0a129363de84  View
56439 9836 CVE-2011-3146 FEDORA-2011-12271  View
56440 9836 CVE-2011-3146 FEDORA-2011-12312  View
56441 9836 CVE-2011-3146 FEDORA-2011-12301  View
56442 9836 CVE-2011-3146 RHSA-2011:1289  View
56443 9836 CVE-2011-3146 https://bugs.launchpad.net/ubuntu/+source/librsvg/+bug/825497  View
56444 9836 CVE-2011-3146 https://bugzilla.gnome.org/show_bug.cgi?id=658014  View
56445 9836 CVE-2011-3146 https://bugzilla.redhat.com/show_bug.cgi?id=734936  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
34910 JVNDB-2011-005152 librsvg におけるサービス運用妨害 (Null ポインタデリファレンス) の脆弱性 librsvg は、ノードタイプの識別にノード名を使用するため、サービス運用妨害 (Null ポインタデリファレンス) 状態となる、および任意のコードを実行される脆弱性が存在します。 CVE-2011-3146 51053 CVE-2011-3146 9836 6.8 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-005152.html 2011-09-06 2012-09-07 View