CVE-2005-0918

Published May 5, 2005 CVSS 2.0 · 5.0 Medium EPSS 2.4% KEV · Not listed
Description
The NPSVG3.dll ActiveX control for Adobe SVG Viewer 3.02 and earlier, when running on Internet Explorer, allows remote attackers to determine the existence of arbitrary files by setting the src property to the target filename and using Javascript to determine if the web page immediately stops loading, which indicates whether the file exists or not.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

No advisories available
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
mitre
Published
Updated
Aug 7, 2024, 9:28 PM
Reserved
Mar 29, 2005, 12:00 AM
Status
Modified
Published
May 5, 2005, 4:00 AM
Modified
Jun 16, 2026, 10:12 PM