{"id":"CVE-2005-2966","details":"The Python SVG import plugin (diasvg_import.py) for DIA 0.94 and earlier allows user-assisted attackers to execute arbitrary commands via a crafted SVG file.","modified":"2026-01-27T04:06:12.599475Z","published":"2005-10-05T21:02:00Z","withdrawn":"2026-01-27T04:06:12.599475Z","references":[{"type":"ADVISORY","url":"http://secunia.com/advisories/17047"},{"type":"ADVISORY","url":"http://secunia.com/advisories/17059"},{"type":"ADVISORY","url":"http://secunia.com/advisories/17083"},{"type":"ADVISORY","url":"http://secunia.com/advisories/17095"},{"type":"ADVISORY","url":"http://secunia.com/advisories/17108"},{"type":"ADVISORY","url":"http://www.debian.org/security/2005/dsa-847"},{"type":"ADVISORY","url":"http://www.debian.org/security/2006/dsa-1025"},{"type":"ADVISORY","url":"http://www.mandriva.com/security/advisories?name=MDKSA-2005:187"},{"type":"ADVISORY","url":"http://www.novell.com/linux/security/advisories/2005_22_sr.html"},{"type":"ADVISORY","url":"http://www.vupen.com/english/advisories/2005/1950"},{"type":"EVIDENCE","url":"http://www.securityfocus.com/bid/15000"},{"type":"WEB","url":"http://www.gentoo.org/security/en/glsa/glsa-200510-06.xml"},{"type":"WEB","url":"https://usn.ubuntu.com/193-1/"}],"schema_version":"1.7.3"}