CVE-2005-2966: Dia

Medium severity, CVSS 5.1. EPSS: 2.6% chance of exploitation in the next 30 days.

The Python SVG import plugin (diasvg_import.py) for DIA 0.94 and earlier allows user-assisted attackers to execute arbitrary commands via a crafted SVG file.

Affected products

• Dia Dia: up to and including 0.94; version 0.91 only; version 0.92.2 only; version 0.93 only

Published 2005-10-05. Last modified 2026-06-16.