CVE-2005-3885 The ps2epsi extension shell script (ps2epsi.sh) in Inkscape before 0.41 allows local users to overwrite arbitrary files via a symlink attack on the tmpepsifile.epsi temporary file.
LowCVSS 2.1
EPSS 0.35%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The ps2epsi extension shell script (ps2epsi.sh) in Inkscape before 0.41 allows local users to overwrite arbitrary files via a symlink attack on the tmpepsifile.epsi temporary file.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| inkscape | = 0.41 | No fix listed |
| debian/inkscape(Debian:12) | < 0.42-1 | 0.42-1 |
| debian/inkscape(Debian:13) | < 0.42-1 | 0.42-1 |
| debian/inkscape(Debian:14) | < 0.42-1 | 0.42-1 |
References
- bugs.debian.org
- 16343 third-party-advisory
- 17882 third-party-advisory
- 17886 third-party-advisory
- DSA-916 vendor-advisory
- 14522 patch vdb-entry
- USN-223-1 vendor-advisory
- Debian Security Tracker CVE-2005-3885 vendor-advisory
- bugs.debian.org issue-tracking