CVSS: 5.5EPSS: 0%CPEs: 25EXPL: 0CVE-2012-6076 – Ubuntu Security Notice USN-1712-1
https://notcve.org/view.php?id=CVE-2012-6076
31 Jan 2013 — Inkscape before 0.48.4 reads .eps files from /tmp instead of the current directory, which might cause Inkspace to process unintended files, allow local users to obtain sensitive information, and possibly have other unspecified impacts. Inkscape anterior a v0.48.4 lee ficheros .eps desde /tmp en lugar del directorio actual, permitiendo a usuarios locales obtener información sensible y posiblemente tener otro impacto no especificado. It was discovered that Inkscape incorrectly handled XML external entities in... • http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=654341 • CWE-264: Permissions, Privileges, and Access Controls •
CVSS: 5.5EPSS: 0%CPEs: 11EXPL: 2CVE-2012-5656 – Ubuntu Security Notice USN-1712-1
https://notcve.org/view.php?id=CVE-2012-5656
18 Jan 2013 — The rasterization process in Inkscape before 0.48.4 allows local users to read arbitrary files via an external entity in a SVG file, aka an XML external entity (XXE) injection attack. El proceso de rasterización en Inkscape antes de v0.48.4 permite a los usuarios locales leer archivos de su elección a través de entidades externas en un archivo SVG. Se trata de un ataque también conocido como ataque de inyección XML a una entidad externa (XXE). It was discovered that Inkscape incorrectly handled XML external... • http://bazaar.launchpad.net/~inkscape.dev/inkscape/trunk/revision/11931 • CWE-611: Improper Restriction of XML External Entity Reference •
CVSS: 9.8EPSS: 7%CPEs: 1EXPL: 0CVE-2007-1464 – Gentoo Linux Security Advisory 200704-10
https://notcve.org/view.php?id=CVE-2007-1464
21 Mar 2007 — Format string vulnerability in the whiteboard Jabber protocol in Inkscape before 0.45.1 allows user-assisted remote attackers to execute arbitrary code via unspecified vectors. Vulnerabilidad de formato de cadena en el protocolo whiteboard Jabber del Inkscape anterior al 0.45.1 permite a atacantes con la intervención del usuario ejecutar código de su elección mediante vectores sin especificar. Kees Cook has discovered two vulnerabilities in Inkscape. The application does not properly handle format string sp... • http://secunia.com/advisories/24615 •
CVSS: 8.8EPSS: 9%CPEs: 11EXPL: 0CVE-2007-1463 – Mandriva Linux Security Advisory 2007.069
https://notcve.org/view.php?id=CVE-2007-1463
21 Mar 2007 — Format string vulnerability in Inkscape before 0.45.1 allows user-assisted remote attackers to execute arbitrary code via format string specifiers in a URI, which is not properly handled by certain dialogs. Vulnerabilidad en el formato de cadena en el Inkscape anterior al 0.45.1 permite a atacantes con la intervención del usuario ejecutar código de su elección mediante especificadores del formato de cadena en una URI,lo que no es manejado correctamente mediante ciertos diálogos. Kees Cook has discovered two... • http://secunia.com/advisories/24584 •
CVSS: 5.5EPSS: 0%CPEs: 1EXPL: 0CVE-2005-3885 – Debian Linux Security Advisory 916-1
https://notcve.org/view.php?id=CVE-2005-3885
29 Nov 2005 — The ps2epsi extension shell script (ps2epsi.sh) in Inkscape before 0.41 allows local users to overwrite arbitrary files via a symlink attack on the tmpepsifile.epsi temporary file. Several vulnerabilities have been discovered in Inkscape, a vector-based drawing program. Joxean Koret discovered a buffer overflow in the SVG parsing routines that can lead to the execution of arbitrary code. Javier Fernandez-Sanguino Pena noticed that the ps2epsi extension shell script uses a hardcoded temporary file making it ... • http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=321501 •
CVSS: 9.8EPSS: 28%CPEs: 4EXPL: 2CVE-2005-3737 – Inkscape 0.41/0.42 - '.SVG' Image Buffer Overflow
https://notcve.org/view.php?id=CVE-2005-3737
22 Nov 2005 — Buffer overflow in the SVG importer (style.cpp) of inkscape 0.41 through 0.42.2 might allow remote attackers to execute arbitrary code via a SVG file with long CSS style property values. Desbordamiento de búfer en el importador SVG (style.cpp) de inkscape 0.41 a 0.42.2 podría permitir a atacantes remotos ejecutar código de su elección importando un fichero SVG malicioso con valores de hoja de estilos CSS largos. Several vulnerabilities have been discovered in Inkscape, a vector-based drawing program. Joxean... • https://www.exploit-db.com/exploits/26540 •