CVE-2005-3885: Low severity Inkscape Inkscape vulnerability

Published Nov 29, 2005

Updated

The ps2epsi extension shell script (ps2epsi.sh) in Inkscape before 0.41 allows local users to overwrite arbitrary files via a symlink attack on the tmpepsifile.epsi temporary file.

Affected Software

1 affected component

Inkscape Inkscape=0.41

Remediation

Patch Available

http://www.securityfocus.com/bid/14522

Event History

Nov 29, 2005

CVE Published

07:03 PM

Nov 30, 2005

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2005-3885?

CVE-2005-3885 is considered a moderate severity vulnerability due to the potential for local users to overwrite arbitrary files.

How do I fix CVE-2005-3885?

To fix CVE-2005-3885, upgrade Inkscape to version 0.41 or later to mitigate the symlink attack risk.

Who is affected by CVE-2005-3885?

CVE-2005-3885 affects local users of Inkscape versions prior to 0.41 on systems where they have access to execute the ps2epsi script.

What is a symlink attack in the context of CVE-2005-3885?

A symlink attack in CVE-2005-3885 involves creating a symbolic link to the temporary file used by the ps2epsi script, allowing unauthorized file overwrites.

Is CVE-2005-3885 still a concern for current Inkscape users?

CVE-2005-3885 is not a concern for users of Inkscape version 0.41 and newer, as the vulnerability has been addressed.