CVE-2005-0754

KDE Kommander 3.2-3.4.0 - Unauthenticated Remote Code Execution via Data File Handling

Title source: manual
STIX 2.1

Description

Kommander in KDE 3.2 through KDE 3.4.0 executes data files without confirmation from the user, which allows remote attackers to execute arbitrary code.

References (5)

Core 5
Core References
Patch, Vendor Advisory x_refsource_confirm
http://www.kde.org/info/security/advisory-20050420-1.txt
Mailing List mailing-list x_refsource_bugtraq
http://marc.info/?l=bugtraq&m=111419664411051&w=2
Patch, Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/15060
Patch, Vendor Advisory vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/13313

Scores

EPSS 0.0228
EPSS Percentile 84.9%

Details

Status published
Products (15)
conectiva/linux 9.0
conectiva/linux 10.0
gentoo/linux
kde/kde 3.2
kde/kde 3.2.1
kde/kde 3.2.2
kde/kde 3.2.3
kde/kde 3.3
kde/kde 3.3.1
kde/kde 3.3.2
... and 5 more
Published Apr 22, 2005
Tracked Since Feb 18, 2026