Unrated
LatexDraw version
CVE-2018-1000639
First seen on SecPulse
Fix status by distribution
Fixed packages published by each distribution for this CVE
- Ubuntu UBUNTU-CVE-2018-1000639 latexdraw
Original description The description as published by the source.
LatexDraw version <=4.0 contains a XML External Entity (XXE) vulnerability in SVG parsing functionality that can result in disclosure of data, server side request forgery, port scanning, possible rce. This attack appear to be exploitable via Specially crafted SVG file.
References
- patch github.com
- report 0dd.zone