nvd-json-data-feeds/CVE-2021/CVE-2021-449xx/CVE-2021-44960.json

{
  "id": "CVE-2021-44960",
  "sourceIdentifier": "cve@mitre.org",
  "published": "2022-02-15T16:15:08.460",
  "lastModified": "2023-04-01T18:15:07.237",
  "vulnStatus": "Modified",
  "descriptions": [
    {
      "lang": "en",
      "value": "In SVGPP SVG++ library 1.3.0, the XMLDocument::getRoot function in the renderDocument function handled the XMLDocument object improperly, returning a null pointer in advance at the second if, resulting in a null pointer reference behind the renderDocument function."
    },
    {
      "lang": "es",
      "value": "En SVGPP SVG++ library versi\u00f3n 1.3.0, la funci\u00f3n XMLDocument::getRoot en la funci\u00f3n renderDocument manejaba el objeto XMLDocument inapropiadamente, devolviendo un puntero null por adelantado en el segundo if, resultando en una referencia de puntero nulo tras la funci\u00f3n renderDocument"
    }
  ],
  "metrics": {
    "cvssMetricV31": [
      {
        "source": "nvd@nist.gov",
        "type": "Primary",
        "cvssData": {
          "version": "3.1",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
          "attackVector": "NETWORK",
          "attackComplexity": "LOW",
          "privilegesRequired": "NONE",
          "userInteraction": "REQUIRED",
          "scope": "UNCHANGED",
          "confidentialityImpact": "NONE",
          "integrityImpact": "NONE",
          "availabilityImpact": "HIGH",
          "baseScore": 6.5,
          "baseSeverity": "MEDIUM"
        },
        "exploitabilityScore": 2.8,
        "impactScore": 3.6
      }
    ],
    "cvssMetricV2": [
      {
        "source": "nvd@nist.gov",
        "type": "Primary",
        "cvssData": {
          "version": "2.0",
          "vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:P",
          "accessVector": "NETWORK",
          "accessComplexity": "MEDIUM",
          "authentication": "NONE",
          "confidentialityImpact": "NONE",
          "integrityImpact": "NONE",
          "availabilityImpact": "PARTIAL",
          "baseScore": 4.3
        },
        "baseSeverity": "MEDIUM",
        "exploitabilityScore": 8.6,
        "impactScore": 2.9,
        "acInsufInfo": false,
        "obtainAllPrivilege": false,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": true
      }
    ]
  },
  "weaknesses": [
    {
      "source": "nvd@nist.gov",
      "type": "Primary",
      "description": [
        {
          "lang": "en",
          "value": "CWE-476"
        }
      ]
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "operator": "OR",
          "negate": false,
          "cpeMatch": [
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:svgpp:svgpp:1.3.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "0191EAF3-1028-4C2E-8FA3-7A0D21F3FB3B"
            }
          ]
        }
      ]
    }
  ],
  "references": [
    {
      "url": "https://github.com/svgpp/svgpp/issues/101",
      "source": "cve@mitre.org",
      "tags": [
        "Exploit",
        "Issue Tracking"
      ]
    },
    {
      "url": "https://github.com/svgpp/svgpp/issues/101.aa",
      "source": "cve@mitre.org",
      "tags": [
        "Exploit",
        "Issue Tracking",
        "Third Party Advisory"
      ]
    },
    {
      "url": "https://lists.debian.org/debian-lts-announce/2023/04/msg00001.html",
      "source": "cve@mitre.org"
    }
  ]
}