CVEvulnerability
CVE-2012-6076
4.4 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2013-03-12
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.4 MEDIUM — AV:L/AC:M/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-264
Description
Inkscape before 0.48.4 reads .eps files from /tmp instead of the current directory, which might cause Inkspace to process unintended files, allow local users to obtain sensitive information, and possibly have other unspecified impacts.
Affected configurations
• inkscape inkscape (<= 0.48.3.1)
• inkscape inkscape 0.37
• inkscape inkscape 0.38.1
• inkscape inkscape 0.39
• inkscape inkscape 0.40
• inkscape inkscape 0.41
• inkscape inkscape 0.42
• inkscape inkscape 0.42.2
• inkscape inkscape 0.43
• inkscape inkscape 0.44
• inkscape inkscape 0.44.1
• inkscape inkscape 0.45.1
• inkscape inkscape 0.46
• inkscape inkscape 0.47
• inkscape inkscape 0.48
• inkscape inkscape 0.48.1
• inkscape inkscape 0.48.2
• inkscape inkscape 0.48.3
Related
Weakness · not in database (1)
References
- http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=654341 bugs.debian.org
- http://lists.opensuse.org/opensuse-updates/2013-02/msg00041.html lists.opensuse.org
- http://lists.opensuse.org/opensuse-updates/2013-02/msg00043.html lists.opensuse.org
- http://www.openwall.com/lists/oss-security/2012/12/30/2 www.openwall.com
- http://www.ubuntu.com/usn/USN-1712-1 www.ubuntu.com
- https://bugs.launchpad.net/inkscape/+bug/911146 bugs.launchpad.net
- http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=654341 bugs.debian.org
- http://lists.opensuse.org/opensuse-updates/2013-02/msg00041.html lists.opensuse.org
- http://lists.opensuse.org/opensuse-updates/2013-02/msg00043.html lists.opensuse.org
- http://www.openwall.com/lists/oss-security/2012/12/30/2 www.openwall.com
- http://www.ubuntu.com/usn/USN-1712-1 www.ubuntu.com
- https://bugs.launchpad.net/inkscape/+bug/911146 bugs.launchpad.net