CVE-2005-3885

Severity: low (CVSS 2.1 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2005-11-29 · updated 2026-06-16

Description

The ps2epsi extension shell script (ps2epsi.sh) in Inkscape before 0.41 allows local users to overwrite arbitrary files via a symlink attack on the tmpepsifile.epsi temporary file.

Affected products

Inkscape: 0.41

References

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=321501
http://secunia.com/advisories/16343
http://secunia.com/advisories/17882
http://secunia.com/advisories/17886
http://www.debian.org/security/2005/dsa-916
http://www.securityfocus.com/bid/14522
https://usn.ubuntu.com/223-1/
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=321501
http://secunia.com/advisories/16343
http://secunia.com/advisories/17882
http://secunia.com/advisories/17886
http://www.debian.org/security/2005/dsa-916

Get alerted when CVE-2005-3885 or the next vulnerability affects your stack