CVE-2012-6076
Ubuntu Security Notice USN-1712-1
Severity Score
5.5
*CVSS v3
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
Inkscape before 0.48.4 reads .eps files from /tmp instead of the current directory, which might cause Inkspace to process unintended files, allow local users to obtain sensitive information, and possibly have other unspecified impacts.
Inkscape anterior a v0.48.4 lee ficheros .eps desde /tmp en lugar del directorio actual, permitiendo a usuarios locales obtener información sensible y posiblemente tener otro impacto no especificado.
It was discovered that Inkscape incorrectly handled XML external entities in SVG files. If a user were tricked into opening a specially-crafted SVG file, Inkscape could possibly include external files in drawings, resulting in information disclosure. It was discovered that Inkscape attempted to open certain files from the /tmp directory instead of the current directory. A local attacker could trick a user into opening a different file than the one that was intended. This issue only applied to Ubuntu 11.10, Ubuntu 12.04 LTS and Ubuntu 12.10. Various other issues were also addressed.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2012-12-06 CVE Reserved
- 2013-01-31 CVE Published
- 2024-08-06 CVE Updated
- 2025-07-13 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-264: Permissions, Privileges, and Access Controls
CAPEC
References (6)
| URL | Tag | Source |
|---|---|---|
| http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=654341 | X_refsource_misc | |
| http://www.openwall.com/lists/oss-security/2012/12/30/2 | Mailing List |
|
| https://bugs.launchpad.net/inkscape/+bug/911146 | X_refsource_confirm |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| http://lists.opensuse.org/opensuse-updates/2013-02/msg00041.html | 2013-03-18 | |
| http://lists.opensuse.org/opensuse-updates/2013-02/msg00043.html | 2013-03-18 | |
| http://www.ubuntu.com/usn/USN-1712-1 | 2013-03-18 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Inkscape Search vendor "Inkscape" | Inkscape Search vendor "Inkscape" for product "Inkscape" | <= 0.48.3.1 Search vendor "Inkscape" for product "Inkscape" and version " <= 0.48.3.1" | - |
Affected
| ||||||
| Inkscape Search vendor "Inkscape" | Inkscape Search vendor "Inkscape" for product "Inkscape" | 0.37 Search vendor "Inkscape" for product "Inkscape" and version "0.37" | - |
Affected
| ||||||
| Inkscape Search vendor "Inkscape" | Inkscape Search vendor "Inkscape" for product "Inkscape" | 0.38.1 Search vendor "Inkscape" for product "Inkscape" and version "0.38.1" | - |
Affected
| ||||||
| Inkscape Search vendor "Inkscape" | Inkscape Search vendor "Inkscape" for product "Inkscape" | 0.39 Search vendor "Inkscape" for product "Inkscape" and version "0.39" | - |
Affected
| ||||||
| Inkscape Search vendor "Inkscape" | Inkscape Search vendor "Inkscape" for product "Inkscape" | 0.40 Search vendor "Inkscape" for product "Inkscape" and version "0.40" | - |
Affected
| ||||||
| Inkscape Search vendor "Inkscape" | Inkscape Search vendor "Inkscape" for product "Inkscape" | 0.41 Search vendor "Inkscape" for product "Inkscape" and version "0.41" | - |
Affected
| ||||||
| Inkscape Search vendor "Inkscape" | Inkscape Search vendor "Inkscape" for product "Inkscape" | 0.42 Search vendor "Inkscape" for product "Inkscape" and version "0.42" | - |
Affected
| ||||||
| Inkscape Search vendor "Inkscape" | Inkscape Search vendor "Inkscape" for product "Inkscape" | 0.42.2 Search vendor "Inkscape" for product "Inkscape" and version "0.42.2" | - |
Affected
| ||||||
| Inkscape Search vendor "Inkscape" | Inkscape Search vendor "Inkscape" for product "Inkscape" | 0.43 Search vendor "Inkscape" for product "Inkscape" and version "0.43" | - |
Affected
| ||||||
| Inkscape Search vendor "Inkscape" | Inkscape Search vendor "Inkscape" for product "Inkscape" | 0.44 Search vendor "Inkscape" for product "Inkscape" and version "0.44" | - |
Affected
| ||||||
| Inkscape Search vendor "Inkscape" | Inkscape Search vendor "Inkscape" for product "Inkscape" | 0.44.1 Search vendor "Inkscape" for product "Inkscape" and version "0.44.1" | - |
Affected
| ||||||
| Inkscape Search vendor "Inkscape" | Inkscape Search vendor "Inkscape" for product "Inkscape" | 0.45.1 Search vendor "Inkscape" for product "Inkscape" and version "0.45.1" | - |
Affected
| ||||||
| Inkscape Search vendor "Inkscape" | Inkscape Search vendor "Inkscape" for product "Inkscape" | 0.46 Search vendor "Inkscape" for product "Inkscape" and version "0.46" | - |
Affected
| ||||||
| Inkscape Search vendor "Inkscape" | Inkscape Search vendor "Inkscape" for product "Inkscape" | 0.47 Search vendor "Inkscape" for product "Inkscape" and version "0.47" | - |
Affected
| ||||||
| Inkscape Search vendor "Inkscape" | Inkscape Search vendor "Inkscape" for product "Inkscape" | 0.47 Search vendor "Inkscape" for product "Inkscape" and version "0.47" | pre0 |
Affected
| ||||||
| Inkscape Search vendor "Inkscape" | Inkscape Search vendor "Inkscape" for product "Inkscape" | 0.47 Search vendor "Inkscape" for product "Inkscape" and version "0.47" | pre1 |
Affected
| ||||||
| Inkscape Search vendor "Inkscape" | Inkscape Search vendor "Inkscape" for product "Inkscape" | 0.47 Search vendor "Inkscape" for product "Inkscape" and version "0.47" | pre2 |
Affected
| ||||||
| Inkscape Search vendor "Inkscape" | Inkscape Search vendor "Inkscape" for product "Inkscape" | 0.47 Search vendor "Inkscape" for product "Inkscape" and version "0.47" | pre3 |
Affected
| ||||||
| Inkscape Search vendor "Inkscape" | Inkscape Search vendor "Inkscape" for product "Inkscape" | 0.47 Search vendor "Inkscape" for product "Inkscape" and version "0.47" | pre4 |
Affected
| ||||||
| Inkscape Search vendor "Inkscape" | Inkscape Search vendor "Inkscape" for product "Inkscape" | 0.48 Search vendor "Inkscape" for product "Inkscape" and version "0.48" | - |
Affected
| ||||||
| Inkscape Search vendor "Inkscape" | Inkscape Search vendor "Inkscape" for product "Inkscape" | 0.48 Search vendor "Inkscape" for product "Inkscape" and version "0.48" | pre0 |
Affected
| ||||||
| Inkscape Search vendor "Inkscape" | Inkscape Search vendor "Inkscape" for product "Inkscape" | 0.48 Search vendor "Inkscape" for product "Inkscape" and version "0.48" | pre1 |
Affected
| ||||||
| Inkscape Search vendor "Inkscape" | Inkscape Search vendor "Inkscape" for product "Inkscape" | 0.48.1 Search vendor "Inkscape" for product "Inkscape" and version "0.48.1" | - |
Affected
| ||||||
| Inkscape Search vendor "Inkscape" | Inkscape Search vendor "Inkscape" for product "Inkscape" | 0.48.2 Search vendor "Inkscape" for product "Inkscape" and version "0.48.2" | - |
Affected
| ||||||
| Inkscape Search vendor "Inkscape" | Inkscape Search vendor "Inkscape" for product "Inkscape" | 0.48.3 Search vendor "Inkscape" for product "Inkscape" and version "0.48.3" | - |
Affected
| ||||||