Show filters
12 Total Results
Displaying 1-10 of 12
Sort by:
Attacker Value
Unknown
CVE-2012-4514
Disclosure Date: November 11, 2012 (last updated October 05, 2023)
rendering/render_replaced.cpp in Konqueror in KDE before 4.9.3 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted web page, related to "trying to reuse a frame with a null part."
0
Attacker Value
Unknown
CVE-2003-0690
Disclosure Date: October 06, 2003 (last updated February 22, 2025)
KDM in KDE 3.1.3 and earlier does not verify whether the pam_setcred function call succeeds, which may allow attackers to gain root privileges by triggering error conditions within PAM modules, as demonstrated in certain configurations of the MIT pam_krb5 module.
0
Attacker Value
Unknown
CVE-2003-0692
Disclosure Date: October 06, 2003 (last updated February 22, 2025)
KDM in KDE 3.1.3 and earlier uses a weak session cookie generation algorithm that does not provide 128 bits of entropy, which allows attackers to guess session cookies via brute force methods and gain access to the user session.
0
Attacker Value
Unknown
CVE-2003-0204
Disclosure Date: May 05, 2003 (last updated February 22, 2025)
KDE 2 and KDE 3.1.1 and earlier 3.x versions allows attackers to execute arbitrary commands via (1) PostScript (PS) or (2) PDF files, related to missing -dPARANOIDSAFER and -dSAFER arguments when using the kghostview Ghostscript viewer.
0
Attacker Value
Unknown
CVE-2002-1393
Disclosure Date: January 17, 2003 (last updated February 22, 2025)
Multiple vulnerabilities in KDE 2 and KDE 3.x through 3.0.5 do not quote certain parameters that are inserted into a shell command, which could allow remote attackers to execute arbitrary commands via (1) URLs, (2) filenames, or (3) e-mail addresses.
0
Attacker Value
Unknown
CVE-2002-2333
Disclosure Date: December 31, 2002 (last updated February 22, 2025)
Buffer overflow in konqueror in KDE 2.1 through 3.0 and 3.0.2 allows remote attackers to cause a denial of service (crash) via an IMG tag with large width and height attributes.
0
Attacker Value
Unknown
CVE-2002-1247
Disclosure Date: November 29, 2002 (last updated February 22, 2025)
Buffer overflow in LISa allows local users to gain access to a raw socket via a long LOGNAME environment variable for the resLISa daemon.
0
Attacker Value
Unknown
CVE-2002-1281
Disclosure Date: November 29, 2002 (last updated February 22, 2025)
Unknown vulnerability in the rlogin KIO subsystem (rlogin.protocol) of KDE 2.x 2.1 and later, and KDE 3.x 3.0.4 and earlier, allows local and remote attackers to execute arbitrary code via a certain URL.
0
Attacker Value
Unknown
CVE-2002-1306
Disclosure Date: November 29, 2002 (last updated February 22, 2025)
Multiple buffer overflows in LISa on KDE 2.x for 2.1 and later, and KDE 3.x before 3.0.4, allow (1) local and possibly remote attackers to execute arbitrary code via the "lisa" daemon, and (2) remote attackers to execute arbitrary code via a certain "lan://" URL.
0
Attacker Value
Unknown
CVE-2002-1282
Disclosure Date: November 29, 2002 (last updated February 22, 2025)
Unknown vulnerability in the telnet KIO subsystem (telnet.protocol) of KDE 2.x 2.1 and later allows local and remote attackers to execute arbitrary code via a certain URL.
0
