Published: 24/03/2015 Updated: 04/11/2017

CVSS v2 Base Score: 6.4 | Impact Score: 4.9 | Exploitability Score: 10

VMScore: 571

Vector: AV:N/AC:L/Au:N/C:P/I:N/A:P

XML external entity (XXE) vulnerability in the SVG to (1) PNG and (2) JPG conversion classes in Apache Batik 1.x prior to 1.8 allows remote malicious users to read arbitrary files or cause a denial of service via a crafted SVG file.

Vulnerable Product	Search on Vulmon	Subscribe to Product
canonical ubuntu linux 14.04
canonical ubuntu linux 12.04
canonical ubuntu linux 14.10
apache batik
redhat jboss enterprise brms platform

Debian Bug report logs - #780897 batik: CVE-2015-0250 Package: src:batik; Maintainer for src:batik is Debian Java Maintainers <pkg-java-maintainers@listsaliothdebianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Sat, 21 Mar 2015 07:09:02 UTC Owned by: tmancill@debianorg Severity: important Tags: ...

Batik could be made to consume resources or expose sensitive information ...

Nicolas Gregoire and Kevin Schaller discovered that Batik, a toolkit for processing SVG images, would load XML external entities by default If a user or automated system were tricked into opening a specially crafted SVG file, an attacker could possibly obtain access to arbitrary files or cause resource consumption For the stable distribution (whe ...

A cheatsheet for exploiting server-side SVG rasterization.

SVG rasterization cheatsheet SVG rasterization cheatsheet XLink:Href references Documents Images Fonts ICC profiles Stylesheets XML stylesheet CSS @import CSS infinite loading via @import rule Infinite loading using /dev/random Tags styles using fill attribute Scripting Embedded scripts Script tag Events External scripts Code execution XML External Entities Li

Ultimate Burp Suite Exam and PortSwigger Labs Guide.

BurpSuiteCertifiedPractitioner Ultimate Burp Suite Exam and PortSwigger Labs Guide In other words BSCP without mOrasmus Strategy The exam consists of two web applications, two hours each Each application has three stages: Get access to any user; Promote yourself to an administrator or steal his data; Using the admin panel read the contents of /home/carlos/secret on the file

NVD-CWE-Other http://seclists.org/fulldisclosure/2015/Mar/142 http://xmlgraphics.apache.org/security.html http://www.ubuntu.com/usn/USN-2548-1 http://packetstormsecurity.com/files/130964/Apache-Batik-XXE-Injection.html http://www.mandriva.com/security/advisories?name=MDVSA-2015:203 http://advisories.mageia.org/MGASA-2015-0138.html http://rhn.redhat.com/errata/RHSA-2016-0041.html http://rhn.redhat.com/errata/RHSA-2016-0042.html http://www-01.ibm.com/support/docview.wss?uid=swg21963275 http://www.securitytracker.com/id/1032781 http://www.debian.org/security/2015/dsa-3205 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=780897 https://usn.ubuntu.com/2548-1/https://nvd.nist.gov

CVE-2015-0250

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

Github Repositories

References

Vulmon Search

About

Products

Connect