vendor:
librsvg2-bin
by:
Hamm3r.py
8.8
CVSS
HIGH
Buffer Overflow
119
CWE
Product Name: librsvg2-bin
Affected Version From: 2.40.13
Affected Version To: 2.42.2
Patch Exists: YES
Related CWE: N/A
CPE: N/A
Metasploit:
N/A
Other Scripts:
N/A
Platforms Tested: Ubuntu 16.04 and MAC 10.13.3
2018
Buffer-overflow in RSVG while converting a malformed svg
RSVG throws a segmentation fault when malformed SVG is submitted as input. GDB Stacktrace shows that the issue is caused by _fill_xrgb32_lerp_opaque_spans function in cairo-image-compositor.c file.
Mitigation:
Input validation should be done to prevent malformed SVG from being submitted as input.