HIGH🇵🇱 Wersja polska

CVE-2017-11464

CVSS 7.8v3.0pub. 2017-07-19upd. 2026-05-13

A SIGFPE is raised in the function box_blur_line of rsvg-filter.c in GNOME librsvg 2.40.17 during an attempted parse of a crafted SVG file, because of incorrect protection against division by zero.

CVSS Vector
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

  • Gnome Librsvg

    APP
    Gnome
    2.40.17
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
References

Related vulnerabilities

CVE-2018-1000041HIGH8.8ten sam produkt

GNOME librsvg version before commit c6ddf2ed4d768fd88adbea2b63f575cd523022ea contains a Improper input validat...

CVE-2016-4348HIGH7.5ten sam produkt

The _rsvg_css_normalize_font_size function in librsvg 2.40.2 allows context-dependent attackers to cause a den...

CVE-2015-7557HIGH7.5ten sam produkt

The _rsvg_node_poly_build_path function in rsvg-shapes.c in librsvg before 2.40.7 allows context-dependent att...

CVE-2015-7558HIGH7.5ten sam produkt

librsvg before 2.40.12 allows context-dependent attackers to cause a denial of service (infinite loop, stack c...

CVE-2023-38633MEDIUM5.5ten sam produkt

A directory traversal problem in the URL decoder of librsvg before 2.56.3 could be used by local or remote att...