Topic
Updated kdepim packages are now available that fix a local buffer overflow
vulnerability.
Description
The K Desktop Environment (KDE) is a graphical desktop for the X Window
System. The KDE Personal Information Management (kdepim) suite helps you to
organize your mail, tasks, appointments, and contacts.
The KDE team found a buffer overflow in the file information reader of
VCF files. An attacker could construct a VCF file so that when it was
opened by a victim it would execute arbitrary commands. The Common
Vulnerabilities and Exposures project (cve.mitre.org) has assigned the name
CAN-2003-0988 to this issue.
Users of kdepim are advised to upgrade to these erratum packages, which
contain a backported security patch that corrects this issue.
Affected Channels
Red Hat Linux 9 i386
Fixes
(none)
Keywords
(none)
CVEs
CAN-2003-0988
References
http://www.kde.org/info/security/advisory-20040114-1.txt
Notes
(none)
Updated kdepim packages are now available that fix a local buffer overflow
vulnerability.
Description
The K Desktop Environment (KDE) is a graphical desktop for the X Window
System. The KDE Personal Information Management (kdepim) suite helps you to
organize your mail, tasks, appointments, and contacts.
The KDE team found a buffer overflow in the file information reader of
VCF files. An attacker could construct a VCF file so that when it was
opened by a victim it would execute arbitrary commands. The Common
Vulnerabilities and Exposures project (cve.mitre.org) has assigned the name
CAN-2003-0988 to this issue.
Users of kdepim are advised to upgrade to these erratum packages, which
contain a backported security patch that corrects this issue.
Affected Channels
Red Hat Linux 9 i386
Fixes
(none)
Keywords
(none)
CVEs
CAN-2003-0988
References
http://www.kde.org/info/security/advisory-20040114-1.txt
Notes
(none)