Possible SVG vulnerability affecting Firefox, evince, eog, Gimp and more

[Till Ulen]

There's an alleged proof-of-concept exploit published on July 8, 2008 at http://www.milw0rm.com/exploits/6029 that says:

"Malicious SVG file DoS

The following applications were tested in their latest revisions:
Firefox's "browse for file, preview" object on linux: affected
evince on linux: affected
eog on linux: affected
gimp on linux: affected
inkscape on linux: unaffected
Microsoft Visio on windows: unaffected

It is unknown at this time whether code execution is possible..."

Unfortunately I currently lack the resources to verify the existence of the vulnerability.

WARNING: the .zip file might harm your computer. Don't open it on your normal machine.

A more or less safe way to test it would be to physically disconnect any important devices (all hard disks, network connections to any networks that trust your machine, etc.) and to boot from a live CD. But you should still know what you're doing.

[Kees Cook (kees)]

I cannot reproduce this on any of the linked packages. Have you seen actual crashes?

[Till Ulen (tillulen)]

On Fri, Aug 1, 2008 at 05:01, Kees Cook wrote:
> I cannot reproduce this on any of the linked packages. Have you seen
> actual crashes?

No, I didn't test it at all because I've got only one machine and it's
in production use right now. I will post an update if I can reproduce
it. I've also posted the link to oss-security in case anybody is
interested to check whether it is a fake or not.