PT-2005-1071 · Kde+1 · Kdebase-Devel+3
Raphaël Enrici
·
Published
2005-01-29
·
Updated
2017-10-11
·
CVE-2005-0078
CVSS v2.0
7.5
High
| Vector | AV:N/AC:L/Au:N/C:P/I:P/A:P |
Name of the Vulnerable Software and Affected Versions
KDE versions prior to 3.0.5
kdebase versions 2.2.2 and 3.1.3
kdebase-devel versions 2.2.2 and 3.1.3
Description
The issue allows attackers to cause a crash and access the desktop session, potentially leading to a violation of confidentiality, integrity, and availability of protected information. The exploitation of these vulnerabilities can be carried out remotely.
Recommendations
For KDE versions prior to 3.0.5, update to version 3.0.5 or later.
For kdebase versions 2.2.2 and 3.1.3, update to a version later than 3.1.3.
For kdebase-devel versions 2.2.2 and 3.1.3, update to a version later than 3.1.3.
As a temporary workaround, consider restricting access to the desktop session until a patch is available.
Fix
Buffer Overflow
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Kde
Red Hat
Kdebase
Kdebase-Devel