CVE catalog

CVE-2012-6076

inkscape: CVE-2012-6076

[CVE catalog]

Severity
Medium
Published
Source
[NVD] · [CVE record]
EPSS
0.49% · Oct 25, 2026

Inkscape before 0.48.4 reads .eps files from /tmp instead of the current directory, which might cause Inkspace to process unintended files, allow local users to obtain sensitive information, and possibly have other unspecified impacts.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianinkscapesid1.4.3-2fixed
Debianinkscapeforky1.4.3-2fixed
Debianinkscapetrixie1.4-6fixed
Debianinkscapebookworm1.2.2-2fixed
Debianinkscapebookworm-security1.2.2-2+deb12u1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianinkscapesourcesid0.48.3.1-1.3lowNot reported[654341]
Debianinkscapesourceforky0.48.3.1-1.3lowNot reported[654341]
Debianinkscapesourcetrixie0.48.3.1-1.3lowNot reported[654341]
Debianinkscapesourcebookworm0.48.3.1-1.3lowNot reported[654341]

[Debian bug #654341]

OpenFactory catalog packages

[Debian 12 (Bookworm)]

  • [inkscape]Fixed

    Source package: [inkscape]

    Details (2)
    • 1.2.2-2+b1 · amd64 · bookworm

      Fixed · Fixed: 0.48.3.1-1.3

      dsa · inkscape · debian · bookworm; dsa · inkscape · debian · 12

    • 1.2.2-2+b1 · arm64 · bookworm

      Fixed · Fixed: 0.48.3.1-1.3

      dsa · inkscape · debian · bookworm; dsa · inkscape · debian · 12

  • Source package: [inkscape]

    Details (2)
    • 1.2.2-2 · all · bookworm

      Fixed · Fixed: 0.48.3.1-1.3

      dsa · inkscape · debian · bookworm; dsa · inkscape · debian · 12

    • 1.2.2-2 · all · bookworm

      Fixed · Fixed: 0.48.3.1-1.3

      dsa · inkscape · debian · bookworm; dsa · inkscape · debian · 12

[Debian 13 (Trixie)]

  • [inkscape]Fixed
    Details (2)
    • 1.4-6 · amd64 · trixie

      Fixed · Fixed: 0.48.3.1-1.3

      dsa · inkscape · debian · 13

    • 1.4-6 · arm64 · trixie

      Fixed · Fixed: 0.48.3.1-1.3

      dsa · inkscape · debian · 13

  • Source package: [inkscape]

    Details (2)
    • 1.4-6 · all · trixie

      Fixed · Fixed: 0.48.3.1-1.3

      dsa · inkscape · debian · 13

    • 1.4-6 · all · trixie

      Fixed · Fixed: 0.48.3.1-1.3

      dsa · inkscape · debian · 13

Observed:

References