Login Request a demo
Unscored severity · published May 17, 2010
CVE-2010-1511
KGet 2.4.2 in KDE SC 4.0.0 through 4.4.3 does not properly request download confirmation from the user, which makes it easier for remote attackers to overwrite arbitrary files via…
–
CVSS
3.3%
EPSS
No
On KEV
Description
KGet 2.4.2 in KDE SC 4.0.0 through 4.4.3 does not properly request download confirmation from the user, which makes it easier for remote attackers to overwrite arbitrary files via a crafted metalink file.
Exploitation
Is it being used?
Exploit prediction (EPSS)3.3% · higher than 89% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
KS
Kde SC · Kde
2.2.0; 3.5.10; 4.0.0; 4.0.0; 4.0.0; 4.0.0; +34 more · source: NVD
KG
Kget · Kde
2.4.2 · source: NVD
Affected product
KS
Kde SC
Kde
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2010-1511
CVE.org
https://www.cve.org/CVERecord?id=CVE-2010-1511
lists.fedoraproject.org
http://lists.fedoraproject.org/pipermail/package-announce/2010-November/051692.html
marc.info
http://marc.info/?l=oss-security&m=127378789518426&w=2
osvdb.org
http://osvdb.org/64689
Vendor Advisory
http://secunia.com/advisories/39528
Vendor Advisory
http://secunia.com/advisories/39787
Vendor Advisory
http://secunia.com/secunia_research/2010-70/
More from Kde SC
–
CVE-2011-2725
Directory traversal vulnerability in Ark 4.7.x and earlier allows remote attackers to delete and force the display of arbitrary files via
–
CVE-2013-4132
KDE-Workspace 4.10.5 and earlier does not properly handle the return value of the glibc 2.17 crypt and pw_encrypt functions, which allows remote attackers to cause a denial of…
–
CVE-2011-3365
The KDE SSL Wrapper (KSSL) API in KDE SC 4.6.0 through 4.7.1, and possibly earlier versions, does not use a certain font when rendering certificate fields in a security dialog,…
–
CVE-2011-1586
Directory traversal vulnerability in the KGetMetalink::File::isValidNameAttr function in ui/metalinkcreator/metalinker.cpp in KGet in KDE SC 4.6.2 and earlier allows remote…
–
CVE-2011-1168
Cross-site scripting (XSS) vulnerability in the KHTMLPart::htmlError function in khtml/khtml_part.cpp in Konqueror in KDE SC 4.4.0 through 4.6.1 allows remote attackers to inject…