Show filters
10 Total Results
Displaying 1-10 of 10
Sort by:
Attacker Value
Unknown
CVE-2012-4514
Disclosure Date: November 11, 2012 (last updated October 05, 2023)
rendering/render_replaced.cpp in Konqueror in KDE before 4.9.3 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted web page, related to "trying to reuse a frame with a null part."
0
Attacker Value
Unknown
CVE-2005-2101
Disclosure Date: August 17, 2005 (last updated February 22, 2025)
langen2kvtml in KDE 3.0 to 3.4.2 creates insecure temporary files in /tmp with predictable names, which allows local users to overwrite arbitrary files.
0
Attacker Value
Unknown
CVE-2005-0078
Disclosure Date: May 02, 2005 (last updated February 22, 2025)
The KDE screen saver in KDE before 3.0.5 does not properly check the return value from a certain function call, which allows attackers with physical access to cause a crash and access the desktop session.
0
Attacker Value
Unknown
CVE-2003-0690
Disclosure Date: October 06, 2003 (last updated February 22, 2025)
KDM in KDE 3.1.3 and earlier does not verify whether the pam_setcred function call succeeds, which may allow attackers to gain root privileges by triggering error conditions within PAM modules, as demonstrated in certain configurations of the MIT pam_krb5 module.
0
Attacker Value
Unknown
CVE-2003-0692
Disclosure Date: October 06, 2003 (last updated February 22, 2025)
KDM in KDE 3.1.3 and earlier uses a weak session cookie generation algorithm that does not provide 128 bits of entropy, which allows attackers to guess session cookies via brute force methods and gain access to the user session.
0
Attacker Value
Unknown
CVE-2003-0204
Disclosure Date: May 05, 2003 (last updated February 22, 2025)
KDE 2 and KDE 3.1.1 and earlier 3.x versions allows attackers to execute arbitrary commands via (1) PostScript (PS) or (2) PDF files, related to missing -dPARANOIDSAFER and -dSAFER arguments when using the kghostview Ghostscript viewer.
0
Attacker Value
Unknown
CVE-2002-1393
Disclosure Date: January 17, 2003 (last updated February 22, 2025)
Multiple vulnerabilities in KDE 2 and KDE 3.x through 3.0.5 do not quote certain parameters that are inserted into a shell command, which could allow remote attackers to execute arbitrary commands via (1) URLs, (2) filenames, or (3) e-mail addresses.
0
Attacker Value
Unknown
CVE-2002-1247
Disclosure Date: November 29, 2002 (last updated February 22, 2025)
Buffer overflow in LISa allows local users to gain access to a raw socket via a long LOGNAME environment variable for the resLISa daemon.
0
Attacker Value
Unknown
CVE-2002-1281
Disclosure Date: November 29, 2002 (last updated February 22, 2025)
Unknown vulnerability in the rlogin KIO subsystem (rlogin.protocol) of KDE 2.x 2.1 and later, and KDE 3.x 3.0.4 and earlier, allows local and remote attackers to execute arbitrary code via a certain URL.
0
Attacker Value
Unknown
CVE-2002-1282
Disclosure Date: November 29, 2002 (last updated February 22, 2025)
Unknown vulnerability in the telnet KIO subsystem (telnet.protocol) of KDE 2.x 2.1 and later allows local and remote attackers to execute arbitrary code via a certain URL.
0
