CVE-2007-1463

Published: Mar 21, 2007Modified: Apr 23, 2026

6.8

Vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Exploitability: 8.6 / Impact: 6.4

Source: NVD

Description

Format string vulnerability in Inkscape before 0.45.1 allows user-assisted remote attackers to execute arbitrary code via format string specifiers in a URI, which is not properly handled by certain dialogs.

Affected (7)

Products: Inkscape: Inkscape

1 product

Configuration A

7 vulnerable · 4 platform

Vulnerable Software	Affected Versions
Inkscape Inkscape	Version 0.40
Inkscape Inkscape	Version 0.41
Inkscape Inkscape	Version 0.42.1
Inkscape Inkscape	Version 0.42.2
Inkscape Inkscape	Version 0.42
Inkscape Inkscape	Version 0.43
Inkscape Inkscape	Version 0.44

Running on/with	Platform Versions
Ubuntu Ubuntu Linux	Version 5.10
Ubuntu Ubuntu Linux	Version 6.06
Ubuntu Ubuntu Linux	Version 6.06_lts
Ubuntu Ubuntu Linux	Version 6.10

References (34)

http://secunia.com/advisories/24584

Source: security@ubuntu.com

http://secunia.com/advisories/24597

Source: security@ubuntu.com

http://secunia.com/advisories/24615

Source: security@ubuntu.com

http://secunia.com/advisories/24661

Source: security@ubuntu.com

http://secunia.com/advisories/24859

Source: security@ubuntu.com

http://secunia.com/advisories/25072

Source: security@ubuntu.com

http://sourceforge.net/project/shownotes.php?group_id=93438&release_id=495106

Source: security@ubuntu.com

Patch

http://www.gentoo.org/security/en/glsa/glsa-200704-10.xml

Source: security@ubuntu.com

http://www.mandriva.com/security/advisories?name=MDKSA-2007:069

Source: security@ubuntu.com

http://www.novell.com/linux/security/advisories/2007_8_sr.html

Source: security@ubuntu.com

http://www.securityfocus.com/archive/1/463710/100/0/threaded

Source: security@ubuntu.com

http://www.securityfocus.com/bid/23070

Source: security@ubuntu.com

http://www.securityfocus.com/bid/23138

Source: security@ubuntu.com

http://www.ubuntu.com/usn/usn-438-1

Source: security@ubuntu.com

Vendor Advisory

http://www.vupen.com/english/advisories/2007/1059

Source: security@ubuntu.com

https://exchange.xforce.ibmcloud.com/vulnerabilities/33163

Source: security@ubuntu.com

https://issues.rpath.com/browse/RPL-1170

Source: security@ubuntu.com

http://secunia.com/advisories/24584

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/24597

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/24615

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/24661

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/24859

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/25072

Source: af854a3a-2127-422b-91ae-364da2661108

http://sourceforge.net/project/shownotes.php?group_id=93438&release_id=495106

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

http://www.gentoo.org/security/en/glsa/glsa-200704-10.xml

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.mandriva.com/security/advisories?name=MDKSA-2007:069

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.novell.com/linux/security/advisories/2007_8_sr.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/archive/1/463710/100/0/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/23070

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/23138

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.ubuntu.com/usn/usn-438-1

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.vupen.com/english/advisories/2007/1059

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/33163

Source: af854a3a-2127-422b-91ae-364da2661108

https://issues.rpath.com/browse/RPL-1170

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.