librsvg XML External Entities CVE-2013-1881 Information Disclosure Vulnerability
BID:62714
Info
librsvg XML External Entities CVE-2013-1881 Information Disclosure Vulnerability
| Bugtraq ID: | 62714 |
| Class: | Input Validation Error |
| CVE: |
CVE-2013-1881 |
| Remote: | Yes |
| Local: | No |
| Published: | Sep 30 2013 12:00AM |
| Updated: | Mar 21 2014 01:44AM |
| Credit: | Timur Yunusov and Alexey Osipov of Positive Technologies. |
| Vulnerable: |
Ubuntu Ubuntu Linux 12.04 LTS i386 Ubuntu Ubuntu Linux 12.04 LTS amd64 Red Hat Enterprise Linux Workstation 6 Red Hat Enterprise Linux Server 6 Red Hat Enterprise Linux HPC Node Optional 6 Red Hat Enterprise Linux HPC Node 6 Red Hat Enterprise Linux Desktop Optional 6 Red Hat Enterprise Linux Desktop 6 Oracle Enterprise Linux 6.2 Oracle Enterprise Linux 6 MandrakeSoft Enterprise Server 5 x86_64 MandrakeSoft Enterprise Server 5 CentOS CentOS 6 |
| Not Vulnerable: | |
Discussion
librsvg XML External Entities CVE-2013-1881 Information Disclosure Vulnerability
librsvg is prone to an information-disclosure vulnerability.
An attacker can exploit this issue to gain access to sensitive information; this may lead to further attacks.
Versions prior to librsvg 2.39 are vulnerable.
librsvg is prone to an information-disclosure vulnerability.
An attacker can exploit this issue to gain access to sensitive information; this may lead to further attacks.
Versions prior to librsvg 2.39 are vulnerable.
Exploit / POC
librsvg XML External Entities CVE-2013-1881 Information Disclosure Vulnerability
An attacker can exploit this issue using readily available tools.
An attacker can exploit this issue using readily available tools.
Solution / Fix
librsvg XML External Entities CVE-2013-1881 Information Disclosure Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.