← Database

CVE-2010-1511

MEDIUM CVSS: 6.4 Published: 2010-05-17 Modified: 2026-06-16

Description

KGet 2.4.2 in KDE SC 4.0.0 through 4.4.3 does not properly request download confirmation from the user, which makes it easier for remote attackers to overwrite arbitrary files via a crafted metalink file.

Affected Platforms

Kde KgetKde Kde Sc

Weakness Type

CWE-264

References