CVE Feed

    Dashboard / CVE / CVE-2011-3146

    CVE-2011-3146

    librsvg before 2.34.1 uses the node name to identify the type of node, which allows context-dependent attackers to cause a denial of service (NULL pointer dereference) and possibly execute arbitrary code via a SVG file with a node with the element name starting with "fe," which is misidentified as a RsvgFilterPrimitive.

    Published:Sep 6, 2011
    Last Modified:Apr 11, 2025
    EPS:Sep 5, 2012
    EPSS Score:0.03439
    CVSS Score:6.8

    Affected Products

    Vendor
    Gnome
    Product
    Librsvg
    Vendor
    Redhat
    Product
    Enterprise Linux

    Exploits

    http://git.gnome.org/browse/librsvg/commit/?id=34c95743ca692ea0e44778e41a7c0a129363de84http://git.gnome.org/browse/librsvg/commit/?id=34c95743ca692ea0e44778e41a7c0a129363de84

    Common Weakness Enumeration

    No CWE recorded yet

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2023-38633 (CVSS 5.5) — A directory traversal problem in the URL decoder of librsvg before 2.56.3 could be used by local or remote att…
    CVE-2019-20446 (CVSS 6.5) — In xml.rs in GNOME librsvg before 2.46.2, a crafted SVG file with nested patterns can cause denial of service …
    CVE-2018-1000041 (CVSS 8.8) — GNOME librsvg version before commit c6ddf2ed4d768fd88adbea2b63f575cd523022ea contains a Improper input validat…
    CVE-2017-11464 (CVSS 7.8) — A SIGFPE is raised in the function box_blur_line of rsvg-filter.c in GNOME librsvg 2.40.17 during an attempted…
    CVE-2016-6163 (CVSS 5.5) — The rsvg_pattern_fix_fallback function in rsvg-paint_server.c in librsvg2 2.40.2 allows remote attackers to ca…
    CVE-2016-4348 (CVSS 7.5) — The _rsvg_css_normalize_font_size function in librsvg 2.40.2 allows context-dependent attackers to cause a den…
    CVE-2015-7557 (CVSS 7.5) — The _rsvg_node_poly_build_path function in rsvg-shapes.c in librsvg before 2.40.7 allows context-dependent att…
    CVE-2015-7558 (CVSS 7.5) — librsvg before 2.40.12 allows context-dependent attackers to cause a denial of service (infinite loop, stack c…
    CVE-2013-1881 (CVSS 4.3) — GNOME libsvg before 2.39.0 allows remote attackers to read arbitrary files via an XML document containing an e…

    References

    http://ftp.gnome.org/pub/GNOME/sources/librsvg/2.34/librsvg-2.34.1.news
    http://git.gnome.org/browse/librsvg/commit/?id=34c95743ca692ea0e44778e41a7c0a129363de84
    http://lists.fedoraproject.org/pipermail/package-announce/2011-September/065730.html
    http://lists.fedoraproject.org/pipermail/package-announce/2011-September/065739.html
    http://lists.fedoraproject.org/pipermail/package-announce/2011-September/066127.html
    http://rhn.redhat.com/errata/RHSA-2011-1289.html
    http://secunia.com/advisories/45877
    https://bugs.launchpad.net/ubuntu/+source/librsvg/+bug/825497
    https://bugzilla.gnome.org/show_bug.cgi?id=658014
    https://bugzilla.redhat.com/show_bug.cgi?id=734936
    http://ftp.gnome.org/pub/GNOME/sources/librsvg/2.34/librsvg-2.34.1.news
    http://git.gnome.org/browse/librsvg/commit/?id=34c95743ca692ea0e44778e41a7c0a129363de84
    http://lists.fedoraproject.org/pipermail/package-announce/2011-September/065730.html
    http://lists.fedoraproject.org/pipermail/package-announce/2011-September/065739.html
    http://lists.fedoraproject.org/pipermail/package-announce/2011-September/066127.html
    http://rhn.redhat.com/errata/RHSA-2011-1289.html
    http://secunia.com/advisories/45877
    https://bugs.launchpad.net/ubuntu/+source/librsvg/+bug/825497
    https://bugzilla.gnome.org/show_bug.cgi?id=658014
    https://bugzilla.redhat.com/show_bug.cgi?id=734936

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High