Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

kde kde 3.4 vulnerabilities and exploits

(subscribe to this query)
356
VMScore
CVE-2006-2449
KDE Display Manager (KDM) in KDE 3.2.0 up to 3.5.3 allows local users to read arbitrary files via a symlink attack related to the session type for login.
Kde Kde 3.2.2Kde Kde 3.2.3Kde Kde 3.4.3Kde Kde 3.5Kde Kde 3.2Kde Kde 3.2.1Kde Kde 3.4.1Kde Kde 3.4.2Kde Kde 3.3Kde Kde 3.3.1Kde Kde 3.5.2Kde Kde 3.5.3Kde Kde 3.3.2Kde Kde 3.4
668
VMScore
CVE-2006-0019
Heap-based buffer overflow in the encodeURI and decodeURI functions in the kjs JavaScript interpreter engine in KDE 3.2.0 up to and including 3.5.0 allows remote malicious users to execute arbitrary code via a crafted, UTF-8 encoded URI.
Kde Kde 3.2.0 Beta1Kde Kde 3.2.1Kde Kde 3.3.2Kde Kde 3.3.xKde Kde 3.2.xKde Kde 3.3Kde Kde 3.4.1Kde Kde 3.4.2Kde Kde 3.2Kde Kde 3.2.0Kde Kde 3.3.0Kde Kde 3.3.1Kde Kde 3.5.0Kde Kde 3.2.2Kde Kde 3.2.3Kde Kde 3.4Kde Kde 3.4.0
605
VMScore
CVE-2007-4569
backend/session.c in KDM in KDE 3.3.0 up to and including 3.5.7, when autologin is configured and "shutdown with password" is enabled, allows remote malicious users to bypass the password requirement and login to arbitrary accounts via unspecified vectors.
Kde Kde 3.4.0Kde Kde 3.4.1Kde Kde 3.5.3Kde Kde 3.5.4Kde Kde 3.3.1Kde Kde 3.3.2Kde Kde 3.4Kde Kde 3.5.1Kde Kde 3.5.2Kde Kde 3.4.2Kde Kde 3.4.3Kde Kde 3.5.5Kde Kde 3.5.6Kde Kde 3.3Kde Kde 3.3.0Kde Kde 3.5Kde Kde 3.5.0Kde Kde 3.5.7
605
VMScore
CVE-2007-0104
The Adobe PDF specification 1.3, as implemented by (a) xpdf 3.0.1 patch 2, (b) kpdf in KDE prior to 3.5.5, (c) poppler prior to 0.5.4, and other products, allows remote malicious users to have an unknown impact, possibly including denial of service (infinite loop), arbitrary code...
Xpdf Xpdf 3.0 Pl2Xpdf Xpdf 3.0Xpdf Xpdf 3.0.1Xpdf Xpdf 3.0.1 Pl1Xpdf Xpdf 3.0.1 Pl2Kde Kde 3.2Kde Kde 3.4Kde Kde 3.4.1Kde Kde 3.2.3Kde Kde 3.3Kde Kde 3.5Kde Kde 3.2.1Kde Kde 3.2.2Kde Kde 3.4.2Kde Kde 3.4.3Kde Kde 3.3.1Kde Kde 3.3.2
445
VMScore
CVE-2005-2101
langen2kvtml in KDE 3.0 to 3.4.2 creates insecure temporary files in /tmp with predictable names, which allows local users to overwrite arbitrary files.
Kde Kde 3.0Kde Kde 3.0.1Kde Kde 3.0.2Kde Kde 3.0.3Kde Kde 3.2Kde Kde 3.2.0 Beta1Kde Kde 3.2.1Kde Kde 3.2.2Kde Kde 3.1.1Kde Kde 3.1.2Kde Kde 3.1.3Kde Kde 3.1.4Kde Kde 3.4Kde Kde 3.4.1Kde Kde 3.4.2Kde Kde 3.0.5Kde Kde 3.1Kde Kde 3.1.5Kde Kde 3.1 Beta1Kde Kde 3.3Kde Kde 3.3.2Kde Kde 3.0.4
668
VMScore
CVE-2005-0754
Kommander in KDE 3.2 through KDE 3.4.0 executes data files without confirmation from the user, which allows remote malicious users to execute arbitrary code.
Kde Quanta 3.1Conectiva Linux 10.0Conectiva Linux 9.0Kde Kde 3.2.1Kde Kde 3.2.2Ubuntu Ubuntu Linux 4.1Ubuntu Ubuntu Linux 5.04Kde Kde 3.2.3Kde Kde 3.3Gentoo LinuxKde Kde 3.2Redhat Fedora Core Core 3.0Kde Kde 3.3.1Kde Kde 3.3.2Kde Kde 3.4
668
VMScore
CVE-2005-1852
Multiple integer overflows in libgadu, as used in Kopete in KDE 3.2.3 to 3.4.1, ekg prior to 1.6rc3, GNU Gadu, CenterICQ, Kadu, and other packages, allows remote malicious users to cause a denial of service (crash) and possibly execute arbitrary code via an incoming message.
Ekg Ekg 1.1 Rc2Ekg Ekg 1.3Ekg Ekg 1.1Ekg Ekg 1.1 Rc1Ekg Ekg 1.4Ekg Ekg 1.5Ekg Ekg 1.0Ekg Ekg 1.0 Rc2Ekg Ekg 1.0 Rc3Ekg Ekg 1.5 Rc1Ekg Ekg 1.5 Rc2Kde Kde 3.3Kde Kde 3.3.1Kde Kde 3.2.3Kde Kde 3.3.2Kde Kde 3.4Kde Kde 3.4.0Kde Kde 3.4.1Centericq CentericqKadu Kadu
505
VMScore
CVE-2012-4514
rendering/render_replaced.cpp in Konqueror in KDE prior to 4.9.3 allows remote malicious users to cause a denial of service (NULL pointer dereference) via a crafted web page, related to "trying to reuse a frame with a null part."
Kde Kde 3.2.1Kde Kde 3.2.3Kde Kde 3.1.1Kde Kde 3.1.2Kde Kde 3.5Kde Kde 3.3.xKde Kde 1.1Kde Kde 4.7.3Kde Kde 2.2Kde Kde 1.xKde Kde 3.5.7Kde Kde 2.0.1Kde Kde 3.0.5Kde Kde 3.1 Beta2Kde Kde 3.0.1Kde Kde 3.0Kde Kde 3.0.2Kde KdeKde Kde 3.1.5Kde Kde 3.1.4Kde Kde 3.2.0Kde Kde 3.2
187
VMScore
CVE-2005-0396
Desktop Communication Protocol (DCOP) daemon, aka dcopserver, in KDE prior to 3.4 allows local users to cause a denial of service (dcopserver consumption) by "stalling the DCOP authentication process."
Kde DcopserverKde Desktop Communication Protocol Daemon
668
VMScore
CVE-2004-0803
Multiple vulnerabilities in the RLE (run length encoding) decoders for libtiff 3.6.1 and previous versions, related to buffer overflows and integer overflows, allow remote malicious users to execute arbitrary code via TIFF files.
Libtiff Libtiff 3.4Libtiff Libtiff 3.5.1Libtiff Libtiff 3.5.2Pdflib Pdf Library 5.0.2Wxgtk2 Wxgtk2 2.5 .0Libtiff Libtiff 3.6.0Libtiff Libtiff 3.6.1Libtiff Libtiff 3.5.3Libtiff Libtiff 3.5.4Libtiff Libtiff 3.5.5Libtiff Libtiff 3.5.7Apple Mac Os X 10.2.5Apple Mac Os X 10.2.6Apple Mac Os X 10.3.5Apple Mac Os X 10.3.6Apple Mac Os X Server 10.2.6Apple Mac Os X Server 10.2.7Apple Mac Os X Server 10.3.5Apple Mac Os X Server 10.3.6Mandrakesoft Mandrake Linux 10.0Redhat Enterprise Linux 2.1Redhat Enterprise Linux 3.0
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2006-4304CVE-2024-4240arbitrary CVE-2024-31601XSSCVE-2023-20198CVE-2024-4256CVE-2024-3342encryption
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook