Bug 11205 - CVE-2007-1463, CVE-2007-1464: inkscape < 0.45.1 vulnerabilities
Summary: CVE-2007-1463, CVE-2007-1464: inkscape < 0.45.1 vulnerabilities
Status: CLOSED FIXED
Alias: None
Product: Sisyphus
Classification: Development
Component: inkscape (show other bugs)
Version: unstable
Hardware: all Linux
: P2 normal
Assignee: Vitaly Lipatov
QA Contact: qa-sisyphus
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2007-03-24 19:33 MSK by Igor Zubkov
Modified: 2007-03-26 01:13 MSD (History)
1 user (show)

See Also:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Igor Zubkov 2007-03-24 19:33:56 MSK 
http://nvd.nist.gov/nvd.cfm?cvename=CVE-2007-1463
"Format string vulnerability in Inkscape before 0.45.1 allows user-assisted
remote attackers to execute arbitrary code via format string specifiers in a
URI, which is not properly handled by certain dialogs."

http://nvd.nist.gov/nvd.cfm?cvename=CVE-2007-1464
"Format string vulnerability in the whiteboard Jabber protocol in Inkscape
before 0.45.1 allows user-assisted remote attackers to execute arbitrary code
via unspecified vectors."

in Sisyphus 0.45...
Comment 1 Vitaly Lipatov 2007-03-25 00:19:25 MSK 
отправил 0.45.1 в Сизиф