CVE-2011-3146: Null Pointer Dereference
A NULL pointer dereference flaw was reported [1] by Sauli Pahlman in librsvg. If a program linked to librsvg where to open a crafted SVG file, it could cause that application to crash or potentially execute arbitrary code.
[1] https://launchpad.net/bugs/825497 https://bugzilla.gnome.org/showbug.cgi?id=658014
Other sources
librsvg before 2.34.1 uses the node name to identify the type of node, which allows context-dependent attackers to cause a denial of service (NULL pointer dereference) and possibly execute arbitrary code via a SVG file with a node with the element name starting with "fe," which is misidentified as a RsvgFilterPrimitive.
— MITRE
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2011-3146?
CVE-2011-3146 has been classified as a high severity vulnerability due to its potential for causing application crashes and executing arbitrary code.
How do I fix CVE-2011-3146?
To fix CVE-2011-3146, update the librsvg package to version 2.34.1 or later.
Which software is affected by CVE-2011-3146?
CVE-2011-3146 affects librsvg versions up to 2.34.0 and any software linked to it that processes crafted SVG files.
Can CVE-2011-3146 lead to remote code execution?
Yes, CVE-2011-3146 can potentially lead to remote code execution if an application linked to librsvg processes a malicious SVG file.
What type of flaw is described in CVE-2011-3146?
CVE-2011-3146 describes a NULL pointer dereference flaw in librsvg.