What’s Vulnerable › Vulnerabilities

CVE-2012-6076

• Severity: medium (CVSS 4.4 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.5% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2013-03-12 · updated 2026-06-16
• Weakness: CWE-264

Description

Inkscape before 0.48.4 reads .eps files from /tmp instead of the current directory, which might cause Inkspace to process unintended files, allow local users to obtain sensitive information, and possibly have other unspecified impacts.

Affected products

• Inkscape: through 0.48.3.1; 0.37, 0.38.1, 0.39, 0.40, 0.41, 0.42 (+18)

References

• http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=654341
• http://lists.opensuse.org/opensuse-updates/2013-02/msg00041.html
• http://lists.opensuse.org/opensuse-updates/2013-02/msg00043.html
• http://www.openwall.com/lists/oss-security/2012/12/30/2
• http://www.ubuntu.com/usn/USN-1712-1
• https://bugs.launchpad.net/inkscape/+bug/911146
• http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=654341
• http://lists.opensuse.org/opensuse-updates/2013-02/msg00041.html
• http://lists.opensuse.org/opensuse-updates/2013-02/msg00043.html
• http://www.openwall.com/lists/oss-security/2012/12/30/2
• http://www.ubuntu.com/usn/USN-1712-1
• https://bugs.launchpad.net/inkscape/+bug/911146

Get alerted when CVE-2012-6076 or the next vulnerability affects your stack