Description
The rasterization process in Inkscape before 0.48.4 allows local users to read arbitrary files via an external entity in a SVG file, aka an XML external entity (XXE) injection attack.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | inkscape | 0.48.3.1-1.2 | — |
| Debian 13 | inkscape | 0.48.3.1-1.2 | — |
| Debian 12 | inkscape | 0.48.3.1-1.2 | — |
References
- [oss-security] 20121219 Re: CVE request: Inkscape fixes a XXE vulnerability during rasterization of SVG images mailing-list
- FEDORA-2012-20620 vendor-advisory
- http://bazaar.launchpad.net/~inkscape.dev/inkscape/trunk/revision/11931
- USN-1712-1 vendor-advisory
- https://launchpad.net/inkscape/+milestone/0.48.4
- 56965 vdb-entry
- https://bugs.launchpad.net/inkscape/+bug/1025185
- FEDORA-2012-20621 vendor-advisory
- openSUSE-SU-2013:0294 vendor-advisory
- openSUSE-SU-2013:0297 vendor-advisory
- FEDORA-2012-20643 vendor-advisory