Fluid Attacks Database

Description

Format string vulnerability in Inkscape before 0.45.1 allows user-assisted remote attackers to execute arbitrary code via format string specifiers in a URI, which is not properly handled by certain dialogs.

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem	Package	Affected version	Patched versions
debian 12	inkscape	>=0 <0.45.1-1	0.45.1-1
debian 14	inkscape	>=0 <0.45.1-1	0.45.1-1
debian 11	inkscape	>=0 <0.45.1-1	0.45.1-1
debian 13	inkscape	>=0 <0.45.1-1	0.45.1-1

Aliases

1. CVE-2007-14632. NVD-2007-14633. OSV-DEBIAN-2007-14634. OSV-2007-14635. SECURITY-TRACKER-CVE-2007-1463

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.