Mozilla Firefox/Evince/EOG/Gimp - '.SVG' Denial of Service (PoC)

EDB-ID:

6029

CVE:

N/A




Platform:

Multiple

Date:

2008-07-08


Become a Certified Penetration Tester

Enroll in Penetration Testing with Kali Linux and pass the exam to become an Offensive Security Certified Professional (OSCP). All new content for 2020.

GET CERTIFIED

"""
Malicious SVG file DoS

The following applications were tested in their latest revisions:
Firefox's "browse for file, preview" object on linux: affected
evince on linux: affected
eog on linux: affected
gimp on linux: affected
inkscape on linux: unaffected
Microsoft Visio on windows: unaffected

It is unknown at this time whether code execution is possible...
"""

https://github.com/offensive-security/exploitdb-bin-sploits/raw/master/bin-sploits/6029.zip (2008-www.NoiseBridge.net.zip)

# milw0rm.com [2008-07-08]