CVE-2016-9181
22.12.2016, 21:59
perl-Image-Info: When parsing an SVG file, external entity expansion (XXE) was not disabled. An attacker could craft an SVG file which, when processed by an application using perl-Image-Info, could cause denial of service or, potentially, information disclosure.Enginsight
| Vendor | Product | Version |
|---|---|---|
| image-info_project | image-info_for_perl | 1.16 |
| image-info_project | image-info_for_perl | 1.30 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
Ubuntu Product | |||||||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| libimage-info-perl |
|