Skip to content
OpenAdvisories
Unscored DSA-3205-1 1 CVE

batik - security update

Published Mar 27, 2015 · Updated Mar 9, 2026

Fixed packages 1

ReleasePackageFixed in
Debian · 7 batik 1.7+dfsg-3+deb7u1

Vulnerabilities 1

  • Medium —
    CVE-2015-0250 EPSS 17%

    Improper Input Validation in Apache Batik

    XML external entity (XXE) vulnerability in the SVG to (1) PNG and (2) JPG conversion classes in Apache Batik 1.x before 1.8 allows remote attackers to read arbitrary files or cause a denial of service via a crafted SVG file.