Kommander in KDE 3.2 through KDE 3.4.0 executes data files without confirmation from the user, which allows remote attackers to execute arbitrary code.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Quanta | Kde | 3.1 (including) | 3.1 (including) |
Linux | Conectiva | 9.0 (including) | 9.0 (including) |
Linux | Conectiva | 10.0 (including) | 10.0 (including) |
Kdewebdev | Ubuntu | dapper | * |
Kdewebdev | Ubuntu | devel | * |
Kdewebdev | Ubuntu | edgy | * |
Kdewebdev | Ubuntu | feisty | * |