CVE-2012-6076
Inkscape before 0.48.4 reads .eps files from /tmp instead of the current directory, which might...
Inkscape before 0.48.4 reads .eps files from /tmp instead of the current directory, which might cause Inkspace to process unintended files, allow local users to obtain sensitive information, and possibly have other unspecified impacts.
Exploit likelihood
What each source reports
NVD Score used
Inkscape before 0.48.4 reads .eps files from /tmp instead of the current directory, which might cause Inkspace to process unintended files, allow local users to obtain sensitive information, and possibly have other unspecified impacts.
- Record
CVE-2012-6076- CVSS 2.0
- 4.4 Medium
AV:L/AC:M/Au:N/C:P/I:P/A:P - Weakness
- CWE-264
- Updated
- 2026-11-02
CVE List No score
Inkscape before 0.48.4 reads .eps files from /tmp instead of the current directory, which might cause Inkspace to process unintended files, allow local users to obtain sensitive information, and possibly have other unspecified impacts.
- Record
CVE-2012-6076- Updated
- 2026-11-02
EUVDEUVD-2012-5950 No score
Inkscape before 0.48.4 reads .eps files from /tmp instead of the current directory, which might cause Inkspace to process unintended files, allow local users to obtain sensitive information, and possibly have other unspecified impacts.
- Record
EUVD-2012-5950- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-j8fj-6j9g-q9p4 No score
Inkscape before 0.48.4 reads .eps files from /tmp instead of the current directory, which might...
Inkscape before 0.48.4 reads .eps files from /tmp instead of the current directory, which might cause Inkspace to process unintended files, allow local users to obtain sensitive information, and possibly have other unspecified impacts.
- Record
GHSA-j8fj-6j9g-q9p4- Updated
- 2026-11-02
OSV No score
Inkscape before 0.48.4 reads .eps files from /tmp instead of the current directory, which might cause Inkspace to process unintended files, allow local users to obtain sensitive information, and possibly have other unspecified impacts.
- Record
CVE-2012-6076- Updated
- 2026-11-02
OSVDEBIAN-CVE-2012-6076 No score
Inkscape before 0.48.4 reads .eps files from /tmp instead of the current directory, which might cause Inkspace to process unintended files, allow local users to obtain sensitive information, and possibly have other unspecified impacts.
- Record
DEBIAN-CVE-2012-6076- Updated
- 2026-11-02
Affected products
Affected packages
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2012-6076 is a medium vulnerability (CVSS 4.4) in Inkscape, published March 12, 2013. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.49%, the 42nd percentile. Fixed in inkscape 0.48.3.1-1.3.
References
openwall.com/lists/oss-security/2012/12/30/2
ubuntu.com/usn/USN-1712-1
bugs.launchpad.net/inkscape/+bug/911146
lists.opensuse.org/opensuse-updates/2013-02/msg00041.html
bugs.debian.org/cgi-bin/bugreport.cgi?bug=654341
nvd.nist.gov/vuln/detail/CVE-2012-6076
github.com/advisories/GHSA-j8fj-6j9g-q9p4
security-tracker.debian.org/tracker/CVE-2012-6076