Bug 11205

Summary:	CVE-2007-1463, CVE-2007-1464: inkscape < 0.45.1 vulnerabilities
Product:	Sisyphus	Reporter:	Igor Zubkov <icesik>
Component:	inkscape	Assignee:	Vitaly Lipatov <lav>
Status:	CLOSED FIXED	QA Contact:	qa-sisyphus
Severity:	normal
Priority:	P2	CC:	lav
Version:	unstable
Hardware:	all
OS:	Linux

Description Igor Zubkov 2007-03-24 19:33:56 MSK

http://nvd.nist.gov/nvd.cfm?cvename=CVE-2007-1463
"Format string vulnerability in Inkscape before 0.45.1 allows user-assisted
remote attackers to execute arbitrary code via format string specifiers in a
URI, which is not properly handled by certain dialogs."

http://nvd.nist.gov/nvd.cfm?cvename=CVE-2007-1464
"Format string vulnerability in the whiteboard Jabber protocol in Inkscape
before 0.45.1 allows user-assisted remote attackers to execute arbitrary code
via unspecified vectors."

in Sisyphus 0.45...

Comment 1 Vitaly Lipatov 2007-03-25 00:19:25 MSK

отправил 0.45.1 в Сизиф