Gentoo KDE Remote Code Execution Advisory: Upgrade Now to Mitigate Risk
gentoo
April 10, 2003
KDE uses Ghostscript software for processing of PostScript (PS) and PDF files in a way that allows for the execution of arbitrary commands that can be contained in such files.
Summary
- - --------------------------------------------------------------------- GENTOO LINUX SECURITY ANNOUNCEMENT 200304-04 - - ---------------------------------------------------------------------
- - ---------------------------------------------------------------------
- From advisory:
"KDE uses Ghostscript software for processing of PostScript (PS) and PDF files in a way that allows for the execution of arbitrary commands that can be contained in such files.
An attacker can prepare a malicious PostScript or PDF file which will provide the attacker with access to the victim's account and privileges when the victim opens this malicious file for viewing or when the victim browses a directory containing such malicious file and has file previews enabled.
An attacker can provide malicious files remotely to a victim in an e-mail, as part of a webpage, via an ftp server and possible other means."
Read the full advisory at: https://kde.org/info/security/advisory-20030409-1.txt
INFORMATION ...Read the Full Advisory
Topics Covered
Resolution
References
Availability
style>.gentoo_availability{display:block;}
Concerns
PREVIOUS
NEXT
Severity
critical
Lowest
Low
Medium
High
Critical
PACKAGE : kde-3.x
SUMMARY : aribitrary code execution
DATE : 2003-04-10 15:34 UTC
EXPLOIT : remote
VERSIONS AFFECTED : <3.1.1a || <3.0.5b : fixed version>=3.1.1a || >=3.0.5b
CVE :
Topics Covered
Background
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Affected Packages
Impact
Workaround
Related News
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!