CVE-2021-42700

Description

Inkscape 0.91 is vulnerable to an out-of-bounds read, which may allow an attacker to have access to unauthorized information.

Risk Information

Base Score
3.3
MODERATE
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
EPSS Score
Exploitation Probability
0.465

Associated Vulnerability

VulnerabilityOS Platform
Vulnerabilities CVE-2021-42700,CVE-2021-42702,CVE-2021-42704 are affected in Inkscape (EXE) (x64) 0.91Windows
Vulnerabilities CVE-2021-42700,CVE-2021-42702,CVE-2021-42704 are affected in Inkscape (EXE) 0.91Windows
Vulnerabilities CVE-2021-42700,CVE-2021-42702,CVE-2021-42704 are affected in Inkscape (x64) 0.91Windows
Vulnerabilities CVE-2021-42700,CVE-2021-42702,CVE-2021-42704 are affected in Inkscape 0.91Windows
inkscape Security Update (ALAS-2023-2043) inkscape-0.92.2-3.amzn2.0.1.x86_64.rpmLinux
inkscape Security Update (ALAS-2023-2043) inkscape-docs-0.92.2-3.amzn2.0.1.x86_64.rpmLinux
inkscape Security Update (ALAS-2023-2043) inkscape-view-0.92.2-3.amzn2.0.1.x86_64.rpmLinux
inkscape Security Update (ALAS2-2023-2043) inkscape-0.92.2-3.amzn2.0.1.x86_64.rpmLinux
inkscape Security Update (ALAS2-2023-2043) inkscape-docs-0.92.2-3.amzn2.0.1.x86_64.rpmLinux
inkscape Security Update (ALAS2-2023-2043) inkscape-view-0.92.2-3.amzn2.0.1.x86_64.rpmLinux

Patch Details

Click to see the patches provided by ManageEngine for this CVE
Patch IDPatch Description
PATCH-334412Inkscape (EXE) (x64) (1.3.1)
PATCH-334562Inkscape (EXE) (1.3.2)
PATCH-342179Inkscape (x64) (1.4)
PATCH-334561Inkscape (1.3.2)

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234