Foresight: inkscape
Posted by Bill Keys   
Previous versions of the inkscape package are vulnerable to attacks which would allow unauthorized system access at the permission level of the user running inkscape (usually non-root). One attack vector is by coercing a user into opening a specially crafted URI, while the other requires that the user be logged into a malicious jabber server using the client provided in inkscape.


Foresight Linux Essential Advisory: 2007-0002-1
Published: 2007-03-24

Rating: Major

Updated Versions:
     inkscape=/foresight.rpath.org at fl:1-devel//1/0.45.1-1
     group-dist=/foresight.rpath.org at fl:1-devel//1/1.1-0.8-4

References:
     https://issues.foresightlinux.org/browse/FL-199
     http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-1463
     http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-1464

Description:
     Previous versions of the inkscape package are vulnerable to attacks 
which would allow unauthorized system access at the permission level of 
the user running inkscape (usually non-root). One attack vector is by 
coercing a user into opening a specially crafted URI, while the other 
requires that the user be logged into a malicious jabber server using 
the client provided in inkscape.