CVE-2015-0250

XML external entity (XXE) vulnerability in the SVG to (1) PNG and (2) JPG conversion classes in Apache Batik 1.x before 1.8 allows remote attackers to read arbitrary files or cause a denial of service via a crafted SVG file.

CVSS v2.0 6.4 MEDIUM

6.4^/10

CVSS v2.0 : MEDIUM

Vector : AV:N/AC:L/Au:N/C:P/I:N/A:P

Exploitability : 10.0 / Impact : 4.9

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact NONE

Availability Impact PARTIAL

References

Link	Resource
http://seclists.org/fulldisclosure/2015/Mar/142	Exploit
http://xmlgraphics.apache.org/security.html	Vendor Advisory
http://www.ubuntu.com/usn/USN-2548-1	Patch
http://packetstormsecurity.com/files/130964/Apache-Batik-XXE-Injection.html
http://www.mandriva.com/security/advisories?name=MDVSA-2015:203
http://advisories.mageia.org/MGASA-2015-0138.html
http://rhn.redhat.com/errata/RHSA-2016-0041.html
http://rhn.redhat.com/errata/RHSA-2016-0042.html
http://www-01.ibm.com/support/docview.wss?uid=swg21963275
http://www.securitytracker.com/id/1032781
http://www.debian.org/security/2015/dsa-3205

Configurations

Configuration 1 (hide)

OR	cpe:2.3:o:canonical:ubuntu_linux:14.04::::lts:::
	cpe:2.3:o:canonical:ubuntu_linux:12.04::::lts:::
	cpe:2.3:o:canonical:ubuntu_linux:14.10:::::::*

Configuration 2 (hide)

cpe:2.3:a:apache:batik:*:*:*:*:*:*:*:*

Configuration 3 (hide)

cpe:2.3:a:redhat:jboss_enterprise_brms_platform:*:*:*:*:*:*:*:*

Information

Published : 2015-03-24 17:59

Updated : 2017-11-04 01:29

NVD link : CVE-2015-0250

Mitre link : CVE-2015-0250

JSON object : View

Products Affected

apache

batik

canonical

ubuntu_linux

redhat

jboss_enterprise_brms_platform

CWE

NVD-CWE-Other

{"cve": {"data_type": "CVE", "references": {"reference_data": [{"url": "http://seclists.org/fulldisclosure/2015/Mar/142", "name": "20150322 [CVE-2015-0250] Apache Batik Information Disclosure Vulnerability (XXE Injection)", "tags": ["Exploit"], "refsource": "FULLDISC"}, {"url": "http://xmlgraphics.apache.org/security.html", "name": "http://xmlgraphics.apache.org/security.html", "tags": ["Vendor Advisory"], "refsource": "CONFIRM"}, {"url": "http://www.ubuntu.com/usn/USN-2548-1", "name": "USN-2548-1", "tags": ["Patch"], "refsource": "UBUNTU"}, {"url": "http://packetstormsecurity.com/files/130964/Apache-Batik-XXE-Injection.html", "name": "http://packetstormsecurity.com/files/130964/Apache-Batik-XXE-Injection.html", "tags": [], "refsource": "MISC"}, {"url": "http://www.mandriva.com/security/advisories?name=MDVSA-2015:203", "name": "MDVSA-2015:203", "tags": [], "refsource": "MANDRIVA"}, {"url": "http://advisories.mageia.org/MGASA-2015-0138.html", "name": "http://advisories.mageia.org/MGASA-2015-0138.html", "tags": [], "refsource": "CONFIRM"}, {"url": "http://rhn.redhat.com/errata/RHSA-2016-0041.html", "name": "RHSA-2016:0041", "tags": [], "refsource": "REDHAT"}, {"url": "http://rhn.redhat.com/errata/RHSA-2016-0042.html", "name": "RHSA-2016:0042", "tags": [], "refsource": "REDHAT"}, {"url": "http://www-01.ibm.com/support/docview.wss?uid=swg21963275", "name": "http://www-01.ibm.com/support/docview.wss?uid=swg21963275", "tags": [], "refsource": "CONFIRM"}, {"url": "http://www.securitytracker.com/id/1032781", "name": "1032781", "tags": [], "refsource": "SECTRACK"}, {"url": "http://www.debian.org/security/2015/dsa-3205", "name": "DSA-3205", "tags": [], "refsource": "DEBIAN"}]}, "data_format": "MITRE", "description": {"description_data": [{"lang": "en", "value": "XML external entity (XXE) vulnerability in the SVG to (1) PNG and (2) JPG conversion classes in Apache Batik 1.x before 1.8 allows remote attackers to read arbitrary files or cause a denial of service via a crafted SVG file."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "en", "value": "NVD-CWE-Other"}]}]}, "data_version": "4.0", "CVE_data_meta": {"ID": "CVE-2015-0250", "ASSIGNER": "secalert@redhat.com"}}, "impact": {"baseMetricV2": {"cvssV2": {"version": "2.0", "baseScore": 6.4, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:P", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "severity": "MEDIUM", "impactScore": 4.9, "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}}, "publishedDate": "2015-03-24T17:59Z", "configurations": {"nodes": [{"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:o:canonical:ubuntu_linux:14.10:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}]}, {"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:a:apache:batik:*:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true, "versionEndIncluding": "1.7"}]}, {"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:a:redhat:jboss_enterprise_brms_platform:*:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true, "versionEndIncluding": "6.1.2"}]}], "CVE_data_version": "4.0"}, "lastModifiedDate": "2017-11-04T01:29Z"}