CVE-2005-0754

Description

Kommander in KDE 3.2 through KDE 3.4.0 executes data files without confirmation from the user, which allows remote attackers to execute arbitrary code.

Affected Platforms

Weakness Type

NVD-CWE-Other

References

• ftp://ftp.kde.org/pub/kde/security_patches/post-3.4.0-kdewebdev-kommander.diff
• http://marc.info/?l=bugtraq&m=111419664411051&w=2
• http://secunia.com/advisories/15060
• http://www.kde.org/info/security/advisory-20050420-1.txt
• http://www.securityfocus.com/bid/13313
• ftp://ftp.kde.org/pub/kde/security_patches/post-3.4.0-kdewebdev-kommander.diff