high7.1
CVE-2016-9181
perl-Image-Info: When parsing an SVG file, external entity expansion (XXE) was not disabled.
Impact
perl-Image-Info: When parsing an SVG file, external entity expansion (XXE) was not disabled. An attacker could craft an SVG file which, when processed by an application using perl-Image-Info, could cause denial of service or, potentially, information disclosure.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Image-Info Project | Image-Info For Perl | Versions 1.16, 1.30 |