KD
Product
Kde
66
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 3Medium 0Low 0
Watch
Add Kde to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2012-4512 | 8.8 | Feb 8 | The CSS parser (khtml/css/cssparser.cpp) in Konqueror in KDE 4.7.3 allows remote attackers to cause a denial of service (crash) and possibly read memory via a crafted font face… Affected: 4.7.3 |
| CVE-2005-1920 | 7.5 | Jul 26 | The (1) Kate and (2) Kwrite applications in KDE KDE 3.2.x through 3.4.0 do not properly set the same permissions on the backup file as were set on the original file, which could… Affected: 3.2 through 3.4.0 |
| CVE-2004-0689 | 7.1 | Sep 28 | KDE before 3.3.0 does not properly handle when certain symbolic links point to "stale" locations, which could allow local users to create or truncate arbitrary files Affected: before 3.3 |
| CVE-2012-4515 | – | Nov 11 | Use-after-free vulnerability in khtml/rendering/render_replaced.cpp in Konqueror in KDE 4.7.3, when the context menu is shown, allows remote attackers to cause a denial of service… Affected: 4.7.3 |
| CVE-2012-4514 | – | Nov 11 | rendering/render_replaced.cpp in Konqueror in KDE before 4.9.3 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted web page, related to… Affected: through 4.9.2; 1.0; 1.1; 1.1.1; 1.1.2; 1.2; +34 more |
| CVE-2012-4513 | – | Nov 11 | khtml/imload/scaledimageplane.h in Konqueror in KDE 4.7.3 allows remote attackers to cause a denial of service (crash) and possibly read memory via large canvas dimensions, which… Affected: 4.7.3 |
| CVE-2008-1671 | – | Apr 28 | start_kdeinit in KDE 3.5.5 through 3.5.9, when installed setuid root, allows local users to cause a denial of service and possibly execute arbitrary code via "user-influenceable… Affected: 3.5.5; 3.5.6; 3.5.7; 3.5.8; 3.5.9 |
| CVE-2008-1670 | – | Apr 28 | Heap-based buffer overflow in the progressive PNG Image loader (decoders/pngloader.cpp) in KHTML in KDE 4.0.x up to 4.0.3 allows remote attackers to cause a denial of service… Affected: 4.0.0; 4.0.1; 4.0.2; 4.0.3 |
| CVE-2007-5963 | – | Dec 19 | Unspecified vulnerability in kdebase allows local users to cause a denial of service (KDM login inaccessible, or resource consumption) via unknown vectors Affected: All versions, or not specified |
| CVE-2007-4569 | – | Sep 21 | backend/session.c in KDM in KDE 3.3.0 through 3.5.7, when autologin is configured and "shutdown with password" is enabled, allows remote attackers to bypass the password… Affected: 3.3; 3.3.0; 3.3.1; 3.3.2; 3.4; 3.4.0; +12 more |
| CVE-2007-0104 | – | Jan 9 | The Adobe PDF specification 1.3, as implemented by (a) xpdf 3.0.1 patch 2, (b) kpdf in KDE before 3.5.5, (c) poppler before 0.5.4, and other products, allows remote attackers to… Affected: 3.2; 3.2.1; 3.2.2; 3.2.3; 3.3; 3.3.1; +6 more |
| CVE-2006-2933 | – | Jul 27 | kdesktop_lock in kdebase before 3.1.3-5.11 for KDE in Red Hat Enterprise Linux (RHEL) 3 does not properly terminate, which can prevent the screensaver from activating or prevent… Affected: 3.1.2; 3.1.3 |
| CVE-2006-2449 | – | Jun 15 | KDE Display Manager (KDM) in KDE 3.2.0 up to 3.5.3 allows local users to read arbitrary files via a symlink attack related to the session type for login Affected: 3.2; 3.2.1; 3.2.2; 3.2.3; 3.3; 3.3.1; +8 more |
| CVE-2006-0019 | – | Jan 20 | Heap-based buffer overflow in the encodeURI and decodeURI functions in the kjs JavaScript interpreter engine in KDE 3.2.0 through 3.5.0 allows remote attackers to execute… Affected: 3.2; 3.2.0; 3.2.0_beta1; 3.2.1; 3.2.2; 3.2.3; +11 more |
| CVE-2005-2494 | – | Sep 6 | kcheckpass in KDE 3.2.0 up to 3.4.2 allows local users to gain root access via a symlink attack on lock files Affected: 3.2.0; 3.2.1; 3.2.2; 3.2.3; 3.3.0; 3.3.1; +4 more |
| CVE-2005-2101 | – | Aug 17 | langen2kvtml in KDE 3.0 to 3.4.2 creates insecure temporary files in /tmp with predictable names, which allows local users to overwrite arbitrary files Affected: 3.0; 3.0.1; 3.0.2; 3.0.3; 3.0.4; 3.0.5; +21 more |
| CVE-2005-1852 | – | Jul 26 | Multiple integer overflows in libgadu, as used in Kopete in KDE 3.2.3 to 3.4.1, ekg before 1.6rc3, GNU Gadu, CenterICQ, Kadu, and other packages, allows remote attackers to cause… Affected: 3.2.3; 3.3; 3.3.1; 3.3.2; 3.4; 3.4.0; +1 more |
| CVE-2005-1046 | – | May 2 | Buffer overflow in the kimgio library for KDE 3.4.0 allows remote attackers to execute arbitrary code via a crafted PCX image file Affected: 3.4.0 |
| CVE-2005-0404 | – | May 2 | KMail 1.7.1 in KDE 3.3.2 allows remote attackers to spoof email information, such as whether the email has been digitally signed or encrypted, via HTML formatted email Affected: 3.3.2 |
| CVE-2005-0365 | – | May 2 | The dcopidlng script in KDE 3.2.x and 3.3.x creates temporary files with predictable filenames, which allows local users to overwrite arbitrary files via a symlink attack Affected: 3.2.x; 3.3.x |
| CVE-2005-0237 | – | May 2 | The International Domain Name (IDN) support in Konqueror 3.2.1 on KDE 3.2.1 allows remote attackers to spoof domain names using punycode encoded domain names that are decoded in… Affected: 3.2.1 |
| CVE-2005-0205 | – | May 2 | KPPP 2.1.2 in KDE 3.1.5 and earlier, when setuid root without certain wrappers, does not properly close a privileged file descriptor for a domain socket, which allows local users… Affected: 3.1; 3.1.1; 3.1.2; 3.1.3; 3.1.4; 3.1.5 |
| CVE-2005-0078 | – | May 2 | The KDE screen saver in KDE before 3.0.5 does not properly check the return value from a certain function call, which allows attackers with physical access to cause a crash and… Affected: 1.0; 1.1; 1.1.1; 1.1.2; 2.0; 2.0.1; +13 more |
| CVE-2005-0011 | – | May 2 | Multiple vulnerabilities in fliccd, when installed setuid root as part of the kdeedu Kstars support for Instrument Neutral Distributed Interface (INDI) in KDE 3.3 to 3.3.2, allow… Affected: 3.3; 3.3.1; 3.3.2 |
| CVE-2005-0206 | – | Apr 27 | The patch for integer overflow vulnerabilities in Xpdf 2.0 and 3.0 (CVE-2004-0888) is incomplete for 64-bit architectures on certain Linux distributions such as Red Hat, which… Affected: 3.2; 3.2.1; 3.2.2; 3.2.3; 3.3; 3.3.1 |
| CVE-2005-0754 | – | Apr 22 | Kommander in KDE 3.2 through KDE 3.4.0 executes data files without confirmation from the user, which allows remote attackers to execute arbitrary code Affected: 3.2; 3.2.1; 3.2.2; 3.2.3; 3.3; 3.3.1; +2 more |
| CVE-2004-0889 | – | Jan 27 | Multiple integer overflows in xpdf 3.0, and other packages that use xpdf code such as CUPS, allow remote attackers to cause a denial of service (crash) and possibly execute… Affected: 3.2; 3.2.1; 3.2.2; 3.2.3; 3.3; 3.3.1 |
| CVE-2004-0888 | – | Jan 27 | Multiple integer overflows in xpdf 2.0 and 3.0, and other packages that use xpdf code such as CUPS, gpdf, and kdegraphics, allow remote attackers to cause a denial of service… Affected: 3.2; 3.2.1; 3.2.2; 3.2.3; 3.3; 3.3.1 |
| CVE-2004-0886 | – | Jan 27 | Multiple integer overflows in libtiff 3.6.1 and earlier allow remote attackers to cause a denial of service (crash or memory corruption) via TIFF images that lead to incorrect… Affected: 3.2; 3.2.1; 3.2.2; 3.2.3; 3.3; 3.3.1 |
| CVE-2004-1171 | – | Jan 10 | KDE 3.2.x and 3.3.0 through 3.3.2, when saving credentials that are (1) manually entered by the user or (2) created by the SMB protocol handler, stores those credentials for… Affected: 3.2; 3.2.1; 3.2.2; 3.2.3; 3.3; 3.3.1; +1 more |
| CVE-2004-1125 | – | Jan 10 | Buffer overflow in the Gfx::doImage function in Gfx.cc for xpdf 3.00, and other products that share code such as tetex-bin and kpdf in KDE 3.2.x to 3.2.3 and 3.3.x to 3.3.2,… Affected: 3.2.3; 3.3.2 |
| CVE-2004-1491 | – | Dec 31 | Opera 7.54 and earlier uses kfmclient exec to handle unknown MIME types, which allows remote attackers to execute arbitrary code via a shortcut or launcher that contains an Exec… Affected: 3.2.3 |
| CVE-2004-0803 | – | Dec 23 | Multiple vulnerabilities in the RLE (run length encoding) decoders for libtiff 3.6.1 and earlier, related to buffer overflows and integer overflows, allow remote attackers to… Affected: 3.2; 3.2.1; 3.2.2; 3.2.3; 3.3; 3.3.1 |
| CVE-2004-0746 | – | Oct 20 | Konqueror in KDE 3.2.3 and earlier allows web sites to set cookies for country-specific top-level domains, such as .ltd.uk, .plc.uk and .firm.in, which could allow remote… Affected: 3.1.3; 3.2 |
| CVE-2004-0690 | – | Sep 28 | The DCOPServer in KDE 3.2.3 and earlier allows local users to gain unauthorized access via a symlink attack on DCOP files in the /tmp directory Affected: 3.2.1 |
| CVE-2003-0988 | – | Feb 17 | Buffer overflow in the VCF file information reader for KDE Personal Information Management (kdepim) suite in KDE 3.1.0 through 3.1.4 allows attackers to execute arbitrary code via… Affected: 3.1.0; 3.1.1; 3.1.2; 3.1.3 |
| CVE-2003-0692 | – | Oct 6 | KDM in KDE 3.1.3 and earlier uses a weak session cookie generation algorithm that does not provide 128 bits of entropy, which allows attackers to guess session cookies via brute… Affected: 1.1; 1.1.1; 1.1.2; 1.2; 2.0; 2.0.1; +21 more |
| CVE-2003-0690 | – | Oct 6 | KDM in KDE 3.1.3 and earlier does not verify whether the pam_setcred function call succeeds, which may allow attackers to gain root privileges by triggering error conditions… Affected: 1.1; 1.1.1; 1.1.2; 1.2; 2.0; 2.0.1; +21 more |
| CVE-2003-0370 | – | Jun 16 | Konqueror Embedded and KDE 2.2.2 and earlier does not validate the Common Name (CN) field for X.509 Certificates, which could allow remote attackers to spoof certificates via a… Affected: through 2.2.2 |
| CVE-2003-0204 | – | May 5 | KDE 2 and KDE 3.1.1 and earlier 3.x versions allows attackers to execute arbitrary commands via (1) PostScript (PS) or (2) PDF files, related to missing -dPARANOIDSAFER and… Affected: 2.0; 2.0.1; 2.1; 2.1.1; 2.1.2; 2.2; +12 more |
| CVE-2002-1393 | – | Jan 17 | Multiple vulnerabilities in KDE 2 and KDE 3.x through 3.0.5 do not quote certain parameters that are inserted into a shell command, which could allow remote attackers to execute… Affected: 2.0; 2.0.1; 2.1; 2.1.1; 2.1.2; 2.2; +9 more |
| CVE-2002-2333 | – | Dec 31 | Buffer overflow in konqueror in KDE 2.1 through 3.0 and 3.0.2 allows remote attackers to cause a denial of service (crash) via an IMG tag with large width and height attributes Affected: 2.1; 2.1.1; 2.1.2; 2.2; 2.2.1; 2.2.2; +2 more |
| CVE-2002-1281 | – | Nov 29 | Unknown vulnerability in the rlogin KIO subsystem (rlogin.protocol) of KDE 2.x 2.1 and later, and KDE 3.x 3.0.4 and earlier, allows local and remote attackers to execute arbitrary… Affected: 2.1; 2.1.1; 2.1.2; 2.2; 2.2.1; 2.2.2; +5 more |
| CVE-2002-1306 | – | Nov 29 | Multiple buffer overflows in LISa on KDE 2.x for 2.1 and later, and KDE 3.x before 3.0.4, allow (1) local and possibly remote attackers to execute arbitrary code via the "lisa"… Affected: 2.1; 2.1.1; 2.1.2; 2.2; 2.2.1; 2.2.2; +4 more |
| CVE-2002-1282 | – | Nov 29 | Unknown vulnerability in the telnet KIO subsystem (telnet.protocol) of KDE 2.x 2.1 and later allows local and remote attackers to execute arbitrary code via a certain URL Affected: 2.1; 2.1.1; 2.1.2; 2.2; 2.2.1; 2.2.2; +5 more |
| CVE-2002-1247 | – | Nov 29 | Buffer overflow in LISa allows local users to gain access to a raw socket via a long LOGNAME environment variable for the resLISa daemon Affected: 2.0; 2.1; 2.2; 3.0; 3.0.1; 3.0.2; +3 more |
| CVE-2002-1224 | – | Oct 28 | Directory traversal vulnerability in kpf for KDE 3.0.1 through KDE 3.0.3a allows remote attackers to read arbitrary files as the kpf user via a URL with a modified icon parameter Affected: 3.0.1; 3.0.2; 3.0.3; 3.0.3a |
| CVE-2002-1223 | – | Oct 28 | Buffer overflow in DSC 3.0 parser from GSview, as used in KGhostView in KDE 1.1 and KDE 3.0.3a, may allow attackers to cause a denial of service or execute arbitrary code via a… Affected: 1.1; 3.0.3a |
| CVE-2002-1152 | – | Oct 11 | Konqueror in KDE 3.0 through 3.0.2 does not properly detect the "secure" flag in an HTTP cookie, which could cause Konqueror to send the cookie across an unencrypted channel,… Affected: 3.0; 3.0.1; 3.0.2 |
| CVE-2002-1151 | – | Oct 11 | The cross-site scripting protection for Konqueror in KDE 2.2.2 and 3.0 through 3.0.3 does not properly initialize the domains on sub-frames and sub-iframes, which can allow remote… Affected: 2.2.2; 3.0; 3.0.1; 3.0.2; 3.0.3 |