CVE-2012-6076 Inkscape before 0.48.4 reads .eps files from /tmp instead of the current directory, which might cause Inkspace to process unintended files, allow local users to obtain sensitive information, and possi...
MediumCVSS 4.4
EPSS 0.49%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Inkscape before 0.48.4 reads .eps files from /tmp instead of the current directory, which might cause Inkspace to process unintended files, allow local users to obtain sensitive information, and possibly have other unspecified impacts.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/inkscape(Debian:12) | < 0.48.3.1-1.3 | 0.48.3.1-1.3 |
| debian/inkscape(Debian:13) | < 0.48.3.1-1.3 | 0.48.3.1-1.3 |
| debian/inkscape(Debian:14) | < 0.48.3.1-1.3 | 0.48.3.1-1.3 |
| inkscape | <= 0.48.3.1 | No fix listed |
| inkscape | = 0.37 | No fix listed |
| inkscape | = 0.38.1 | No fix listed |
| inkscape | = 0.39 | No fix listed |
| inkscape | = 0.40 | No fix listed |
| inkscape | = 0.41 | No fix listed |
| inkscape | = 0.42 | No fix listed |
| inkscape | = 0.42.2 | No fix listed |
| inkscape | = 0.43 | No fix listed |
| inkscape | = 0.44 | No fix listed |
| inkscape | = 0.44.1 | No fix listed |
| inkscape | = 0.45.1 | No fix listed |
| inkscape | = 0.46 | No fix listed |
| inkscape | = 0.47 | No fix listed |
| inkscape | = 0.47-pre0 | No fix listed |
| inkscape | = 0.47-pre1 | No fix listed |
| inkscape | = 0.47-pre2 | No fix listed |
| inkscape | = 0.47-pre3 | No fix listed |
| inkscape | = 0.47-pre4 | No fix listed |
| inkscape | = 0.48 | No fix listed |
| inkscape | = 0.48-pre0 | No fix listed |
| inkscape | = 0.48-pre1 | No fix listed |
Show 3 more
| Product | Affected versions | Fixed in |
|---|---|---|
| inkscape | = 0.48.1 | No fix listed |
| inkscape | = 0.48.2 | No fix listed |
| inkscape | = 0.48.3 | No fix listed |
References
- Debian Security Tracker CVE-2012-6076 vendor-advisory
- bugs.debian.org
- openSUSE-SU-2013:0294 vendor-advisory
- openSUSE-SU-2013:0297 vendor-advisory
- [oss-security] 20121229 Re: Inkscape reads .eps files from /tmp instead of the current directory mailing-list
- USN-1712-1 vendor-advisory
- bugs.launchpad.net
- bugs.debian.org issue-tracking