The Python SVG import plugin (diasvg_import.py) for DIA 0.94 and earlier allows user-assisted attackers to execute arbitrary commands via a crafted SVG file.

'infamous41md' discovered three buffer overflow errors in the xfig import code of dia, a diagram editor, that can lead to the execution of arbitrary code.

Joxean Koret discovered that the SVG import plugin did not properly sanitise data read from an SVG file. By tricking an user into opening a specially crafted SVG file, an attacker could exploit this to execute arbitrary code with the privileges of the user.

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Joxean Koret discovered that the Python SVG import plugin in dia, a vector-oriented diagram editor, does not properly sanitise data read from an SVG file and is hence vulnerable to execute arbitrary Python code.

The updated packages have been patched to address this issue.

The remote host is affected by the vulnerability described in GLSA-200510-06 (Dia: Arbitrary code execution through SVG import)

    Joxean Koret discovered that the SVG import plugin in Dia fails to     properly sanitise data read from an SVG file.
  Impact :

    An attacker could create a specially crafted SVG file, which, when     imported into Dia, could lead to the execution of arbitrary code.
  Workaround :

    There is no known workaround at this time.

Joxean Koret discovered that the Python SVG import plugin in dia, a vector-oriented diagram editor, does not properly sanitise data read from an SVG file and is hence vulnerable to execute arbitrary Python code.

ID	Name	Product	Family	Severity
22567	Debian DSA-1025-1 : dia - programming error	Nessus	Debian Local Security Checks	high
20607	Ubuntu 5.04 : dia vulnerability (USN-193-1)	Nessus	Ubuntu Local Security Checks	medium
20432	Mandrake Linux Security Advisory : dia (MDKSA-2005:187)	Nessus	Mandriva Local Security Checks	medium
19976	GLSA-200510-06 : Dia: Arbitrary code execution through SVG import	Nessus	Gentoo Local Security Checks	medium
19955	Debian DSA-847-1 : dia - missing input sanitising	Nessus	Debian Local Security Checks	medium

Detections

Analytics

CVE-2005-2966

high

Tenable Plugins

high

medium

medium

medium

medium