KDE desktop environment PCX graphics format buffer overflow

Multiple kimgio image reading vulnerabilities...

[KDE Security Advisory]: kimgio input validation errors

KDE Security Advisory: kimgio input validation errors Original Release Date: 2005-04-21 URL: http://www.kde.org/info/security/advisory-20050421-1.txt 0. References http://bugs.kde.org/102328 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2005-1046 1. Systems affected: kdelibs as shipped with K...

CVE-2005-0754

Kommander in KDE 3.2 through KDE 3.4.0 executes data files without confirmation from the user, which allows remote attackers to execute arbitrary code...

CVE-2005-0754

Kommander in KDE 3.2 through KDE 3.4.0 executes data files without confirmation from the user, which allows remote attackers to execute arbitrary code...

KDE kimgio: PCX handling buffer overflow

Background KDE is a feature-rich graphical desktop environment for Linux and Unix-like Operating Systems. kimgio is the KDE image handler provided by kdelibs. Description kimgio fails to properly validate input when handling PCX files. Impact By enticing a user to load a specially-crafted PCX ima...

[SA15060] KDE Kommander Arbitrary Code Execution Vulnerability

---------------------------------------------------------------------- Want a new IT Security job? Vacant positions at Secunia: http://secunia.com/secuniavacancies/ ---------------------------------------------------------------------- TITLE: KDE Kommander Arbitrary Code Execution Vulnerability...

KDE Kommander code execution

No description provided...

Kommander: Insecure remote script execution

Background KDE is a feature-rich graphical desktop environment for Linux and Unix-like Operating Systems. Kommander is a visual dialog editor and interpreter for KDE applications, part of the kdewebdev package. Description Kommander executes data files from possibly untrusted locations without us...

CVE-2005-0404

CVE-2005-0404 describes a vulnerability in KDE’s KMail 1.7.1 (KDE 3.3.2) where HTML-formatted emails can spoof visible email metadata (e.g., signing/encryption indicators). The root cause is how KMail handles HTML content, enabling an attacker to overlay content to misrepresent the email’s origin...

CVE-2005-0404

KMail 1.7.1 in KDE 3.3.2 allows remote attackers to spoof email information, such as whether the email has been digitally signed or encrypted, via HTML formatted email...

CVE-2005-1046

CVE-2005-1046 is a vulnerability in KDE’s kimgio library used by KDE 3.4.0 (kdelibs/kimgio). A buffer overflow when processing PCX images allows remote attackers to execute arbitrary code. Impact is remote code execution with network access and no user interaction per the CVSS data. The public do...

CVE-2005-1046

Buffer overflow in the kimgio library for KDE 3.4.0 allows remote attackers to execute arbitrary code via a crafted PCX image file...

SUSE-SA:2005:022: kdelibs3

The remote host is missing the patch for the advisory SUSE-SA:2005:022 kdelibs3. Several vulnerabilities have been identified and fixed in the KDE desktop environment. - A buffer overflow via specially crafted PCX pictures was fixed. This could lead to a remote attacker being able to execute code...

[Full-disclosure] SUSE Security Announcement: various KDE security problems (SUSE-SA:2005:022)

-----BEGIN PGP SIGNED MESSAGE----- SUSE Security Announcement Package: kdelibs3 Announcement-ID: SUSE-SA:2005:022 Date: Mon, 11 Apr 2005 15:00:00 +0000 Affected products: 9.1, 9.2, 9.3 SUSE Linux Enterprise Server 9 Novell Linux Desktop 9 Vulnerability Type: remote code execution local denial of...

KDE KMail 1.7.1 - HTML EMail Remote Email Content Spoofing

KDE KMail 1.7.1 - HTML EMail Remote Email Content Spoofing source: https://www.securityfocus.com/bid/13085/info A remote email message content spoofing vulnerability affects KDE KMail. This issue is due to a failure of the application to properly sanitize HTML email messages. An attacker may...

KDE KMail HTML Email Information Spoofing

Binary data 2811.prm...

KDE KMail 1.7.1 - HTML EMail Remote Email Content Spoofing

source: https://www.securityfocus.com/bid/13085/info A remote email message content spoofing vulnerability affects KDE KMail. This issue is due to a failure of the application to properly sanitize HTML email messages. An attacker may leverage this issue to spoof email content and various header...

arts, kdelibs security update

CentOS Errata and Security Advisory CESA-2005:307-01 Updated kdelibs packages that fix a local denial of service issue are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The kdelibs package provides libraries for the K Desktop...

RHEL 2.1 / 3 : kdelibs (RHSA-2005:307)

Updated kdelibs packages that fix a local denial of service issue are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The kdelibs package provides libraries for the K Desktop Environment. Sebastian Krahmer discovered a flaw in...

Moderate: Red Hat Security Advisory: kdelibs security update

Updated kdelibs packages that fix a local denial of service issue are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The kdelibs package provides libraries for the K Desktop Environment. Sebastian Krahmer discovered a flaw in...