CVE-2005-3737

published 2005-11-22

CVE-2005-3737: Buffer overflow in the SVG importer (style.cpp) of inkscape 0.41 through 0.42.2 might allow remote attackers to execute arbitrary code via a SVG file with long…

Priority P4 29 medium 5.1 CVSS 2.0

AV N AC H Au N C P I P A P

EXPLOIT

Buffer overflow in the SVG importer (style.cpp) of inkscape 0.41 through 0.42.2 might allow remote attackers to execute arbitrary code via a SVG file with long CSS style property values.

Affected

9 ranges

Vendor	Product	Version range	Fixed in
debian	inkscape	< inkscape 0.43-1 (bookworm)	inkscape 0.43-1 (bookworm)
inkscape	inkscape	—	—
inkscape	inkscape	—	—
inkscape	inkscape	—	—
inkscape	inkscape	—	—
inkscape	inkscape	>= 0 < 0.43-1	0.43-1
inkscape	inkscape	>= 0 < 0.43-1	0.43-1
inkscape	inkscape	>= 0 < 0.43-1	0.43-1
inkscape	inkscape	>= 0 < 0.43-1	0.43-1

CVSS provenance

nvd v2.0 5.1 MEDIUM AV:N/AC:H/Au:N/C:P/I:P/A:P

osv 5.1 MEDIUM

vendor_debian 5.1 MEDIUM

CVEs like this are exactly what “Exploited This Week” covers.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.