CVE:CVE-2012-6076
CNNVD:CNNVD-201303-271
Inkscape是一个开放原始码的向量绘图软件。
Inkscape 0.48.4之前版本中存在漏洞，该漏洞源于程序从/tmp目录中而非当前目录中读取.eps文件，可导致Inkspace处理非预期的文件。本地攻击者利用该漏洞获得敏感信息，也可能存在其他未明影响。
solution:Upgrade inkscape inkscape to a higher version than 0.48.3.1,0.37,0.38.1,0.39,0.40,0.41,0.42,0.42.2,0.43,0.44,0.44.1,0.45.1,0.46,0.47,0.47:pre0,0.47:pre1,0.47:pre2,0.47:pre3,0.47:pre4,0.48,0.48:pre0,0.48:pre1,0.48.1,0.48.2,0.48.3,and avoid the version (,0.48.3.1],0.37,0.38.1,0.39,0.40,0.41,0.42,0.42.2,0.43,0.44,0.44.1,0.45.1,0.46,0.47,0.47:pre0,0.47:pre1,0.47:pre2,0.47:pre3,0.47:pre4,0.48,0.48:pre0,0.48:pre1,0.48.1,0.48.2,0.48.3