Entreprise française de cybersécurité depuis 2004
☎ 03 60 47 09 81 - info@securiteinfo.com

CVE-2017-1000498

Description

AndroidSVG version 1.2.2 is vulnerable to XXE attacks in the SVG parsing component resulting in denial of service and possibly remote code execution

POC

Reference

No PoCs from references.

Github

- https://github.com/A-TPL-Bench/LibHunter

- https://github.com/Anonymous-Phunter/PHunter

- https://github.com/CGCL-codes/LibHunter

- https://github.com/CGCL-codes/PHunter

- https://github.com/LibHunter/LibHunter