Description
Inkscape before 0.48.4 reads .eps files from /tmp instead of the current directory, which might cause Inkspace to process unintended files, allow local users to obtain sensitive information, and possibly have other unspecified impacts.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a n/a
n/aaffected
References
- http://www.openwall.com/lists/oss-security/2012/12/30/2 ↗
- http://www.ubuntu.com/usn/USN-1712-1 ↗
- https://bugs.launchpad.net/inkscape/+bug/911146 ↗
- http://lists.opensuse.org/opensuse-updates/2013-02/msg00041.html ↗
- http://lists.opensuse.org/opensuse-updates/2013-02/msg00043.html ↗
- http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=654341 ↗