CVE-2013-1881: Input Validation
GNOME libsvg before 2.39.0 allows remote attackers to read arbitrary files via an XML document containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2013-1881?
CVE-2013-1881 is categorized as a high severity vulnerability due to its potential for file disclosure via XML External Entity (XXE) exploitation.
How do I fix CVE-2013-1881?
To fix CVE-2013-1881, upgrade GNOME libsvg to version 2.39.0 or later to mitigate the vulnerability.
What types of attacks can exploit CVE-2013-1881?
CVE-2013-1881 can be exploited through crafted XML documents that contain external entity declarations and references.
Which versions of GNOME librsvg are affected by CVE-2013-1881?
CVE-2013-1881 affects all versions of GNOME librsvg prior to 2.39.0.
How can I identify if my systems are vulnerable to CVE-2013-1881?
You can identify vulnerability to CVE-2013-1881 by checking the installed version of GNOME librsvg on your systems.