Unscored severity · published Apr 22, 2005
CVE-2005-0754
Kommander in KDE 3.2 through KDE 3.4.0 executes data files without confirmation from the user, which allows remote attackers to execute arbitrary code
–
CVSS
3%
EPSS
No
On KEV
Description
Kommander in KDE 3.2 through KDE 3.4.0 executes data files without confirmation from the user, which allows remote attackers to execute arbitrary code.
Exploitation
Is it being used?
Exploit prediction (EPSS)3.0% · higher than 87% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
FC
Fedora Core · Redhat
core_3.0 · source: NVD
KD
Kde · Kde
3.2; 3.2.1; 3.2.2; 3.2.3; 3.3; 3.3.1; +2 more · source: NVD
LI
Linux · Conectiva
9.0; 10.0 · source: NVD
QU
Quanta · Kde
3.1 · source: NVD
UL
Ubuntu Linux · Ubuntu
4.1; 4.1; 5.04; 5.04; 5.04 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2005-0754
CVE.org
https://www.cve.org/CVERecord?id=CVE-2005-0754
marc.info
http://marc.info/?l=bugtraq&m=111419664411051&w=2
Patch
http://secunia.com/advisories/15060
Patch
http://www.kde.org/info/security/advisory-20050420-1.txt
Patch
http://www.securityfocus.com/bid/13313
More from Linux
9.8
CVE-2002-0083
Off-by-one error in the channel code of OpenSSH 2.0 through 3.0.2 allows local users or remote malicious servers to gain privileges
–
CVE-2005-3626
Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows attackers to cause a denial of service (crash) via a crafted…
–
CVE-2005-3625
Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows attackers to cause a denial of service (infinite loop) via streams…
–
CVE-2005-3624
The CCITTFaxStream::CCITTFaxStream function in Stream.cc for xpdf, gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others allows attackers to corrupt the heap via…
–
CVE-2005-0207
Unknown vulnerability in Linux kernel 2.4.x, 2.5.x, and 2.6.x allows NFS clients to cause a denial of service via O_DIRECT