CVE-2015-0250: Medium severity ubuntu vulnerability
XML external entity (XXE) vulnerability in the SVG to (1) PNG and (2) JPG conversion classes in Apache Batik 1.x before 1.8 allows remote attackers to read arbitrary files or cause a denial of service via a crafted SVG file.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2015-0250?
CVE-2015-0250 is considered a high severity vulnerability due to its potential to allow remote attackers to read arbitrary files.
How do I fix CVE-2015-0250?
To mitigate CVE-2015-0250, upgrade Apache Batik to version 1.8 or higher.
What causes the CVE-2015-0250 vulnerability?
The CVE-2015-0250 vulnerability is caused by improper parsing of SVG files, leading to XML external entity (XXE) injection.
Which software versions are affected by CVE-2015-0250?
CVE-2015-0250 affects Apache Batik versions prior to 1.8 and specific versions of Ubuntu and Red Hat JBoss Enterprise BRMS.
What are the potential impacts of CVE-2015-0250?
The impacts of CVE-2015-0250 include unauthorized file access and potential denial of service due to crafted SVG files.