The ps2epsi extension shell script (ps2epsi.sh) in Inkscape before 0.41 allows local users to overwrite arbitrary files via a symlink attack on the tmpepsifile.epsi temporary file.
Affected Software
Name |
Vendor |
Start Version |
End Version |
Inkscape |
Inkscape |
0.41 (including) |
0.41 (including) |
References