Vulnerabilities > CVE-2017-1000498 - XXE vulnerability in Androidsvg Project Androidsvg 1.2.2

047910
CVSS 6.8 - MEDIUM
Attack vector
NETWORK
Attack complexity
MEDIUM
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
PARTIAL
Availability impact
PARTIAL

Summary

AndroidSVG version 1.2.2 is vulnerable to XXE attacks in the SVG parsing component resulting in denial of service and possibly remote code execution

Vulnerable Configurations

Part Description Count
Application
Androidsvg_Project
1