high7.5
CVE-2005-0754
Kommander in KDE 3.2 through KDE 3.4.0 executes data files without confirmation from the user, which allows remote attackers to execute arbitrary code.
Impact
Kommander in KDE 3.2 through KDE 3.4.0 executes data files without confirmation from the user, which allows remote attackers to execute arbitrary code.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Kde | Quanta | Version 3.1 |
| Conectiva | Linux | Versions 9.0, 10.0 |
| Gentoo | Linux | All versions |
| Kde | Kde | Versions 3.2, 3.2.1, 3.2.2, 3.2.3, 3.3, 3.3.1 |
| Redhat | Fedora Core | Version core_3.0 |
| Ubuntu | Ubuntu Linux | Versions 4.1, 5.04 |
References
- NVD record
- CVE.org record
- http://marc.info/?l=bugtraq&m=111419664411051&w=2
- http://secunia.com/advisories/15060
- http://www.kde.org/info/security/advisory-20050420-1.txt
- http://www.securityfocus.com/bid/13313
- http://marc.info/?l=bugtraq&m=111419664411051&w=2
- http://secunia.com/advisories/15060
- http://www.kde.org/info/security/advisory-20050420-1.txt
- http://www.securityfocus.com/bid/13313