Unscored severity · published Sep 5, 2012
CVE-2011-3146
librsvg before 2.34.1 uses the node name to identify the type of node, which allows context-dependent attackers to cause a denial of service (NULL pointer dereference) and…
–
CVSS
4.4%
EPSS
No
On KEV
Description
librsvg before 2.34.1 uses the node name to identify the type of node, which allows context-dependent attackers to cause a denial of service (NULL pointer dereference) and possibly execute arbitrary code via a SVG file with a node with the element name starting with "fe," which is misidentified as a RsvgFilterPrimitive.
Exploitation
Is it being used?
Exploit prediction (EPSS)4.4% · higher than 91% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
LI
Librsvg · Gnome
through 2.34.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2011-3146
CVE.org
https://www.cve.org/CVERecord?id=CVE-2011-3146
ftp.gnome.org
http://ftp.gnome.org/pub/GNOME/sources/librsvg/2.34/librsvg-2.34.1.news
Exploit
http://git.gnome.org/browse/librsvg/commit/?id=34c95743ca692ea0e44778e41a7c0a129363de84
lists.fedoraproject.org
http://lists.fedoraproject.org/pipermail/package-announce/2011-September/065730.html
lists.fedoraproject.org
http://lists.fedoraproject.org/pipermail/package-announce/2011-September/065739.html
lists.fedoraproject.org
http://lists.fedoraproject.org/pipermail/package-announce/2011-September/066127.html
rhn.redhat.com
http://rhn.redhat.com/errata/RHSA-2011-1289.html
More from Librsvg
8.8
CVE-2018-1000041
GNOME librsvg version before commit c6ddf2ed4d768fd88adbea2b63f575cd523022ea contains a Improper input validation vulnerability in rsvg-io.c that can result in the victim's…
7.8
CVE-2017-11464
A SIGFPE is raised in the function box_blur_line of rsvg-filter.c in GNOME librsvg 2.40.17 during an attempted parse of a crafted SVG file, because of incorrect protection against…
7.5
CVE-2016-4348
The _rsvg_css_normalize_font_size function in librsvg 2.40.2 allows context-dependent attackers to cause a denial of service (stack consumption and application crash) via circular…
7.5
CVE-2015-7558
librsvg before 2.40.12 allows context-dependent attackers to cause a denial of service (infinite loop, stack consumption, and application crash) via cyclic references in an SVG…
7.5
CVE-2015-7557
The _rsvg_node_poly_build_path function in rsvg-shapes.c in librsvg before 2.40.7 allows context-dependent attackers to cause a denial of service (out-of-bounds heap read) via an…