KDE 2 and KDE 3.1.1 and earlier 3.x versions allows attackers to execute arbitrary commands via (1) PostScript (PS) or (2) PDF files, related to missing -dPARANOIDSAFER and -dSAFER arguments when using the kghostview Ghostscript viewer.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Kde | Kde | 2.0 | 2.0 |
| Kde | Kde | 2.0.1 | 2.0.1 |
| Kde | Kde | 2.1 | 2.1 |
| Kde | Kde | 2.1.1 | 2.1.1 |
| Kde | Kde | 2.1.2 | 2.1.2 |
| Kde | Kde | 2.2 | 2.2 |
| Kde | Kde | 2.2.1 | 2.2.1 |
| Kde | Kde | 2.2.2 | 2.2.2 |
| Kde | Kde | 3.0 | 3.0 |
| Kde | Kde | 3.0.1 | 3.0.1 |
| Kde | Kde | 3.0.2 | 3.0.2 |
| Kde | Kde | 3.0.3 | 3.0.3 |
| Kde | Kde | 3.0.3a | 3.0.3a |
| Kde | Kde | 3.0.4 | 3.0.4 |
| Kde | Kde | 3.0.5 | 3.0.5 |
| Kde | Kde | 3.0.5a | 3.0.5a |
| Kde | Kde | 3.1 | 3.1 |
| Kde | Kde | 3.1.1 | 3.1.1 |