CVE-2005-0918

The NPSVG3.dll ActiveX control for Adobe SVG Viewer 3.02 and earlier, when running on Internet Explorer, allows remote attackers to determine the existence of arbitrary files by setting the src property to the target filename and using Javascript to determine if the web page immediately stops loading, which indicates whether the file exists or not.

• CWE-203

• http://secunia.com/advisories/15255Broken Link, Vendor Advisory
• http://securitytracker.com/id?1013890Broken Link, Third Party Advisory, VDB Entry
• http://www.adobe.com/support/techdocs/323585.htmlBroken Link, Patch
• http://www.hyperdose.com/advisories/H2005-07.txtBroken Link, Exploit, Patch
• http://secunia.com/advisories/15255Broken Link, Vendor Advisory
• http://securitytracker.com/id?1013890Broken Link, Third Party Advisory, VDB Entry
• http://www.adobe.com/support/techdocs/323585.htmlBroken Link, Patch
• http://www.hyperdose.com/advisories/H2005-07.txtBroken Link, Exploit, Patch

Published

May 5, 2005

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2005-0912Unknown vulnerabilities in deplate before 0.7.2 have unknown…
• CVE-2005-0913Unknown vulnerability in the regex_replace modifier (modifie…
• CVE-2005-0914Multiple cross-site scripting (XSS) vulnerabilities in CPG D…
• CVE-2005-0915Webmasters-Debutants WD Guestbook 2.8 allows remote attacker…
• CVE-2005-0916AIO in the Linux kernel 2.6.11 on the PPC64 or IA64 architec…
• CVE-2005-0917PHP remote file inclusion vulnerability in index_header.php …
• CVE-2005-0919Adventia Chat 3.1 and Server Pro 3.0 allows remote attackers…
• CVE-2005-0920Multiple SQL injection vulnerabilities in Bugtracker.NET 2.0…
• CVE-2005-0921Microsoft Outlook 2002 Connector for IBM Lotus Domino 2.0 al…
• CVE-2005-0922Unknown vulnerability in the Auto-Protect module in Symantec…
• CVE-2005-0923The SmartScan feature in the Auto-Protect module for Symante…
• CVE-2005-0924Cross-site scripting (XSS) vulnerability in Adventia E-Data …