KDE : Security Vulnerabilities, CVEs, Published In 2010 CVSS score >= 5
The FoFiType1::parse function in fofi/FoFiType1.cc in the PDF parser in xpdf before 3.02pl5, poppler 0.8.7 and possibly other versions up to 0.15.1, kdegraphics, and possibly other products allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via a PDF file with a crafted PostScript Type1 font that contains a negative array index, which bypasses input validation and triggers memory corruption.
Max CVSS
6.8
EPSS Score
0.57%
Published
2010-11-05
Updated
2019-03-06
Heap-based buffer overflow in the RLE decompression functionality in the TranscribePalmImageToJPEG function in generators/plucker/inplug/image.cpp in Okular in KDE SC 4.3.0 through 4.5.0 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted image in a PDB file.
Max CVSS
6.8
EPSS Score
6.01%
Published
2010-08-30
Updated
2018-10-10
KGet 2.4.2 in KDE SC 4.0.0 through 4.4.3 does not properly request download confirmation from the user, which makes it easier for remote attackers to overwrite arbitrary files via a crafted metalink file.
Max CVSS
6.4
EPSS Score
0.83%
Published
2010-05-17
Updated
2018-10-10
Directory traversal vulnerability in KGet in KDE SC 4.0.0 through 4.4.3 allows remote attackers to create arbitrary files via directory traversal sequences in the name attribute of a file element in a metalink file.
Max CVSS
5.8
EPSS Score
0.62%
Published
2010-05-17
Updated
2018-10-10
Race condition in workspace/krunner/lock/lockdlg.cc in the KRunner lock module in kdebase in KDE SC 4.4.0 allows physically proximate attackers to bypass KScreenSaver screen locking and access an unattended workstation by pressing the Enter key at a certain time, related to multiple forked processes.
Max CVSS
6.9
EPSS Score
0.05%
Published
2010-03-03
Updated
2010-03-04
Race condition in backend/ctrl.c in KDM in KDE Software Compilation (SC) 2.2.0 through 4.4.2 allows local users to change the permissions of arbitrary files, and consequently gain privileges, by blocking the removal of a certain directory that contains a control socket, related to improper interaction with ksm.
Max CVSS
6.9
EPSS Score
0.04%
Published
2010-04-15
Updated
2017-09-19
6 vulnerabilities found