CVE-2005-0754

Kommander in KDE 3.2 through KDE 3.4.0 executes data files without confirmation from the user, which allows remote attackers to execute arbitrary code.

Score

CVSS 2.0 7.5 High

Status

Modified - secalert@redhat.com

Published

2005-04-22

Last modified

2024-08-07

Affected products

• Linux (Conectiva)
• Linux (Gentoo)
• Kde (Kde)
• Quanta (Kde)
• Fedora Core (Redhat)
• Ubuntu Linux (Ubuntu)

References

• http://marc.info/?l=bugtraq&m=111419664411051&w=2
• http://secunia.com/advisories/15060
• http://www.kde.org/info/security/advisory-20050420-1.txt
• http://www.securityfocus.com/bid/13313