Unscored severity · published Mar 12, 2013
CVE-2012-6076
Inkscape before 0.48.4 reads .eps files from /tmp instead of the current directory, which might cause Inkspace to process unintended files, allow local users to obtain sensitive…
–
CVSS
0.5%
EPSS
No
On KEV
Description
Inkscape before 0.48.4 reads .eps files from /tmp instead of the current directory, which might cause Inkspace to process unintended files, allow local users to obtain sensitive information, and possibly have other unspecified impacts.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.5% · higher than 42% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
IN
Inkscape · Inkscape
through 0.48.3.1; 0.37; 0.38.1; 0.39; 0.40; 0.41; +19 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2012-6076
CVE.org
https://www.cve.org/CVERecord?id=CVE-2012-6076
bugs.debian.org
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=654341
lists.opensuse.org
http://lists.opensuse.org/opensuse-updates/2013-02/msg00041.html
lists.opensuse.org
http://lists.opensuse.org/opensuse-updates/2013-02/msg00043.html
www.openwall.com
http://www.openwall.com/lists/oss-security/2012/12/30/2
www.ubuntu.com
http://www.ubuntu.com/usn/USN-1712-1
bugs.launchpad.net
https://bugs.launchpad.net/inkscape/+bug/911146
More from Inkscape
7.8
CVE-2021-42704
Inkscape version 0.91 is vulnerable to an out-of-bounds write, which may allow an attacker to arbitrary execute code
6.3
CVE-2026-4980
Improper Restriction of XML External Entity Reference in Inkscape
5.5
CVE-2012-5656
The rasterization process in Inkscape before 0.48.4 allows local users to read arbitrary files via an external entity in a SVG file, aka an XML external entity (XXE) injection…
3.3
CVE-2021-42702
Inkscape version 0.91 can access an uninitialized pointer, which may allow an attacker to have access to unauthorized information
3.3
CVE-2021-42700
Inkscape 0.91 is vulnerable to an out-of-bounds read, which may allow an attacker to have access to unauthorized information