← back
CVE-2015-0250

CVE-2015-0250

EPSS 16.7%
XML external entity (XXE) vulnerability in the SVG to (1) PNG and (2) JPG conversion classes in Apache Batik 1.x before 1.8 allows remote attackers to read arbitrary files or cause a denial of service via a crafted SVG file.
Affected products
n/a · n/a

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
http://advisories.mageia.org/MGASA-2015-0138.htmlhttp://packetstormsecurity.com/files/130964/Apache-Batik-XXE-Injection.htmlhttp://rhn.redhat.com/errata/RHSA-2016-0041.htmlhttp://rhn.redhat.com/errata/RHSA-2016-0042.htmlhttp://seclists.org/fulldisclosure/2015/Mar/142http://www-01.ibm.com/support/docview.wss?uid=swg21963275http://www.debian.org/security/2015/dsa-3205http://www.mandriva.com/security/advisories?name=MDVSA-2015:203http://www.securitytracker.com/id/1032781http://www.ubuntu.com/usn/USN-2548-1http://xmlgraphics.apache.org/security.html