CVE Feed

    Dashboard / CVE / CVE-2007-1463

    CVE-2007-1463

    Format string vulnerability in Inkscape before 0.45.1 allows user-assisted remote attackers to execute arbitrary code via format string specifiers in a URI, which is not properly handled by certain dialogs.

    Published:Mar 21, 2007
    Last Modified:Apr 23, 2026
    EPS:Mar 21, 2007
    EPSS Score:0.16555
    CVSS Score:6.8

    Affected Products

    Vendor
    Inkscape
    Product
    Inkscape
    Vendor
    Ubuntu
    Product
    Ubuntu Linux

    Exploits

    No exploit reference

    Common Weakness Enumeration

    No CWE recorded yet

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2026-4980 (CVSS 6.3) — A local file disclosure vulnerability in the XInclude processing component of Inkscape 1.1 before 1.3 allows a…
    CVE-2025-15523 (CVSS 4.8) — MacOS version of Inkscape bundles a Python interpreter that inherits the Transparency, Consent, and Control (T…
    CVE-2021-42704 (CVSS 7.8) — Inkscape version 0.91 is vulnerable to an out-of-bounds write, which may allow an attacker to arbitrary execut…
    CVE-2021-42700 (CVSS 3.3) — Inkscape 0.91 is vulnerable to an out-of-bounds read, which may allow an attacker to have access to unauthoriz…
    CVE-2021-42702 (CVSS 3.3) — Inkscape version 0.91 can access an uninitialized pointer, which may allow an attacker to have access to unaut…
    CVE-2012-5656 (CVSS 5.5) — The rasterization process in Inkscape before 0.48.4 allows local users to read arbitrary files via an external…
    CVE-2012-6076 (CVSS 4.4) — Inkscape before 0.48.4 reads .eps files from /tmp instead of the current directory, which might cause Inkspace…
    CVE-2007-1464 (CVSS 6.8) — Format string vulnerability in the whiteboard Jabber protocol in Inkscape before 0.45.1 allows user-assisted r…
    CVE-2005-3885 (CVSS 2.1) — The ps2epsi extension shell script (ps2epsi.sh) in Inkscape before 0.41 allows local users to overwrite arbitr…
    CVE-2005-3737 (CVSS 5.1) — Buffer overflow in the SVG importer (style.cpp) of inkscape 0.41 through 0.42.2 might allow remote attackers t…

    References

    http://secunia.com/advisories/24584
    http://secunia.com/advisories/24597
    http://secunia.com/advisories/24615
    http://secunia.com/advisories/24661
    http://secunia.com/advisories/24859
    http://secunia.com/advisories/25072
    http://sourceforge.net/project/shownotes.php?group_id=93438&release_id=495106
    http://www.gentoo.org/security/en/glsa/glsa-200704-10.xml
    http://www.mandriva.com/security/advisories?name=MDKSA-2007:069
    http://www.novell.com/linux/security/advisories/2007_8_sr.html
    http://www.securityfocus.com/archive/1/463710/100/0/threaded
    http://www.securityfocus.com/bid/23070
    http://www.securityfocus.com/bid/23138
    http://www.ubuntu.com/usn/usn-438-1
    http://www.vupen.com/english/advisories/2007/1059
    https://exchange.xforce.ibmcloud.com/vulnerabilities/33163
    https://issues.rpath.com/browse/RPL-1170
    http://secunia.com/advisories/24584
    http://secunia.com/advisories/24597
    http://secunia.com/advisories/24615
    http://secunia.com/advisories/24661
    http://secunia.com/advisories/24859
    http://secunia.com/advisories/25072
    http://sourceforge.net/project/shownotes.php?group_id=93438&release_id=495106
    http://www.gentoo.org/security/en/glsa/glsa-200704-10.xml
    http://www.mandriva.com/security/advisories?name=MDKSA-2007:069
    http://www.novell.com/linux/security/advisories/2007_8_sr.html
    http://www.securityfocus.com/archive/1/463710/100/0/threaded
    http://www.securityfocus.com/bid/23070
    http://www.securityfocus.com/bid/23138
    http://www.ubuntu.com/usn/usn-438-1
    http://www.vupen.com/english/advisories/2007/1059
    https://exchange.xforce.ibmcloud.com/vulnerabilities/33163
    https://issues.rpath.com/browse/RPL-1170

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High