CVE-2011-3146 Null dereference in n/a
Attackers can cause denial of service or execute arbitrary code by tricking users into opening a malicious SVG file with a library that misidentifies filter primitives.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- Available
What is CVE-2011-3146?
CVE-2011-3146 is a medium-severity vulnerability in n/a, published on 5 Sep 2012. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.
Official description
librsvg before 2.34.1 uses the node name to identify the type of node, which allows context-dependent attackers to cause a denial of service (NULL pointer dereference) and possibly execute arbitrary code via a SVG file with a node with the element name starting with "fe," which is misidentified as a RsvgFilterPrimitive.
Which versions are affected by CVE-2011-3146?
It affects 1 product.
Linux distribution packages (3)
librsvg2 Red Hat:enterprise_linux:6::server | All versions | 0:2.26.0-5.el6_1.1 |
librsvg2-debuginfo Red Hat:enterprise_linux:6::server | All versions | 0:2.26.0-5.el6_1.1 |
librsvg2-devel Red Hat:enterprise_linux:6::server | All versions | 0:2.26.0-5.el6_1.1 |
Products include Gnome Librsvg.
How do I fix CVE-2011-3146?
Upgrade to a fixed version.
Is CVE-2011-3146 being exploited?
There is no known exploitation of CVE-2011-3146 in the wild and no public exploit code.
Other vulnerabilities in n/a
Sources
Also known as DEBIAN-CVE-2011-3146, GHSA-x9rw-3x6c-c4h9, RHSA-2011:1289.