• info
• discussion
• exploit
• solution
• references

Inkscape Malicious URI Format String Vulnerability

Solution:
The vendor has released fixes to address this issue; please see the reference section for details.


Inkscape Inkscape 0.42

• Ubuntu inkscape_0.42-1ubuntu0.2_amd64.deb
  Ubuntu 5.10:
  http://security.ubuntu.com/ubuntu/pool/main/i/inkscape/inkscape_0.42-1 ubuntu0.2_amd64.deb


• Ubuntu inkscape_0.42-1ubuntu0.2_i386.deb
  Ubuntu 5.10:
  http://security.ubuntu.com/ubuntu/pool/main/i/inkscape/inkscape_0.42-1 ubuntu0.2_i386.deb


• Ubuntu inkscape_0.42-1ubuntu0.2_powerpc.deb
  Ubuntu 5.10:
  http://security.ubuntu.com/ubuntu/pool/main/i/inkscape/inkscape_0.42-1 ubuntu0.2_powerpc.deb


• Ubuntu inkscape_0.42-1ubuntu0.2_sparc.deb
  Ubuntu 5.10:
  http://security.ubuntu.com/ubuntu/pool/main/i/inkscape/inkscape_0.42-1 ubuntu0.2_sparc.deb

Inkscape Inkscape 0.43

• Ubuntu inkscape_0.43-4ubuntu3.1_amd64.deb
  Ubuntu 6.06 LTS:
  http://security.ubuntu.com/ubuntu/pool/main/i/inkscape/inkscape_0.43-4 ubuntu3.1_amd64.deb


• Ubuntu inkscape_0.43-4ubuntu3.1_i386.deb
  Ubuntu 6.06 LTS:
  http://security.ubuntu.com/ubuntu/pool/main/i/inkscape/inkscape_0.43-4 ubuntu3.1_i386.deb


• Ubuntu inkscape_0.43-4ubuntu3.1_powerpc.deb
  Ubuntu 6.06 LTS:
  http://security.ubuntu.com/ubuntu/pool/main/i/inkscape/inkscape_0.43-4 ubuntu3.1_powerpc.deb


• Ubuntu inkscape_0.43-4ubuntu3.1_sparc.deb
  Ubuntu 6.06 LTS:
  http://security.ubuntu.com/ubuntu/pool/main/i/inkscape/inkscape_0.43-4 ubuntu3.1_sparc.deb

Inkscape Inkscape 0.44

• Mandriva inkscape-0.44-4.1mdv2007.0.i586.rpm
  Mandriva Linux 2007.0:
  http://www.mandriva.com/en/download


• Mandriva inkscape-0.44-4.1mdv2007.0.x86_64.rpm
  Mandriva Linux 2007.0/X86_64:
  http://www.mandriva.com/en/download


• Ubuntu inkscape_0.44-1ubuntu2.1_amd64.deb
  Ubuntu 6.10:
  http://security.ubuntu.com/ubuntu/pool/main/i/inkscape/inkscape_0.44-1 ubuntu2.1_amd64.deb


• Ubuntu inkscape_0.44-1ubuntu2.1_i386.deb
  Ubuntu 6.10:
  http://security.ubuntu.com/ubuntu/pool/main/i/inkscape/inkscape_0.44-1 ubuntu2.1_i386.deb


• Ubuntu inkscape_0.44-1ubuntu2.1_powerpc.deb
  Ubuntu 6.10:
  http://security.ubuntu.com/ubuntu/pool/main/i/inkscape/inkscape_0.44-1 ubuntu2.1_powerpc.deb


• Ubuntu inkscape_0.44-1ubuntu2.1_sparc.deb
  Ubuntu 6.10:
  http://security.ubuntu.com/ubuntu/pool/main/i/inkscape/inkscape_0.44-1 ubuntu2.1_sparc.deb