AndroidSVG version 1.2.2 is vulnerable to XXE attacks in the SVG parsing component resulting in denial of service and possibly remote code execution
Metrics
Affected Vendors & Products
References
Link | Providers |
---|---|
https://github.com/BigBadaboom/androidsvg/issues/122 |
History
No history.
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2018-01-03T14:00:00Z
Updated: 2024-09-16T16:13:29.547Z
Reserved: 2018-01-03T00:00:00Z
Link: CVE-2017-1000498
Vulnrichment
No data.
NVD
Status : Modified
Published: 2018-01-03T14:29:00.363
Modified: 2024-11-21T03:04:52.453
Link: CVE-2017-1000498
Redhat
No data.