Back to Database
Status published
Medium
CVE-2005-3737
Buffer overflow in the SVG importer (style.cpp) of inkscape 0.41...
Vulnerability Description
Buffer overflow in the SVG importer (style.cpp) of inkscape 0.41 through 0.42.2 might allow remote attackers to execute arbitrary code via a SVG file with long CSS style property values.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2005-3737
Credits & Attribution
No credits recorded in the NVD database.
References
- http://www.gentoo.org/security/en/glsa/glsa-200511-22.xml
- http://www.novell.com/linux/security/advisories/2005_28_sr.html
- http://secunia.com/advisories/17778
- http://secunia.com/advisories/17651
- http://www.ubuntulinux.org/usn/usn-217-1
- http://www.securityfocus.com/bid/15507
- http://secunia.com/advisories/17882
- http://cvs.sourceforge.net/viewcvs.py/inkscape/inkscape/src/style.cpp?r1=1.110&r2=1.110.2.1
- http://www.vupen.com/english/advisories/2005/2511
- http://www.debian.org/security/2005/dsa-916
- http://securityreason.com/securityalert/58
- http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=330894
- http://secunia.com/advisories/17662
More from inkscape
View All →CVE-2012-6076
Inkscape before 0.48.4 reads .eps files from /tmp instead of...
Medium
4.4
CVE-2012-5656
The rasterization process in Inkscape before 0.48.4 allows local users...
Medium
5.5
CVE-2007-1464
Format string vulnerability in the whiteboard Jabber protocol in Inkscape...
Medium
6.8
CVE-2007-1463
Format string vulnerability in Inkscape before 0.45.1 allows user-assisted remote...
Medium
6.8
CVE-2005-3885
The ps2epsi extension shell script (ps2epsi.sh) in Inkscape before 0.41...
Low
2.1
Affected Vendor
inkscape
View all reports →Affected Software
inkscape
Vulnerable Versions:
0.41, 0.42, 0.42.1, 0.42.2
Timeline
Official Publish:
November 22nd, 2005
Last Modified:
August 7th, 2024
Added to House:
July 18th, 2026
CVSS Vectors
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.