CVE-2007-1463: Inkscape

Medium severity, CVSS 6.8. EPSS: 3.4% chance of exploitation in the next 30 days.

Format string vulnerability in Inkscape before 0.45.1 allows user-assisted remote attackers to execute arbitrary code via format string specifiers in a URI, which is not properly handled by certain dialogs.

Affected products

• Inkscape Inkscape: version 0.40 only; version 0.41 only; version 0.42 only; version 0.42.1 only; version 0.42.2 only; version 0.43 only; …

Published 2007-03-21. Last modified 2026-06-16.