Multiple Vendors Malicious SVG File Denial of Service PoC

IT セキュリティ

色々なベンダーにおいて、SVGファイルを開くことでDoSを受ける脆弱性だそうです。

""" Malicious SVG file DoS The following applications were tested in their latest revisions: Firefox's "browse for file, preview" object on linux: affected evince on linux: affected eog on linux: affected gimp on linux: affected inkscape on linux: unaffected Microsoft Visio on windows: unaffected It is unknown at this time whether code execution is possible... """

http://www.milw0rm.com/exploits/6029

screenshot