CVE-2005-2966

Publication date 5 October 2005

Last updated 17 July 2025

Ubuntu priority

The Python SVG import plugin (diasvg_import.py) for DIA 0.94 and earlier allows user-assisted attackers to execute arbitrary commands via a crafted SVG file.

Status

Show unmaintained releases

Package	Ubuntu Release	Status
dia	7.04 feisty	Fixed 0.94.0-17.1ubuntu3
	6.10 edgy	Fixed 0.94.0-17.1ubuntu3
	6.06 LTS dapper	Fixed 0.94.0-17.1ubuntu3

How can I get the fixes?
What do statuses mean?

References

MITRE
NVD
Launchpad
Debian

Related Ubuntu Security Notices (USN)

USN-193-1
dia vulnerability
4 October 2005

Other references

https://www.cve.org/CVERecord?id=CVE-2005-2966