CVE-2016-9181

Name of the Vulnerable Software and Affected Versions perl-Image-Info (affected versions not specified)

Description The issue concerns external entity expansion (XXE) not being disabled when parsing an SVG file. This could allow an attacker to craft a malicious SVG file, potentially leading to denial of service or information disclosure when processed by an application using the affected software.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.