Lucene search

K
redhatRedHatRHSA-2005:393
HistoryMay 17, 2005 - 12:00 a.m.

(RHSA-2005:393) kdelibs security update

2005-05-1700:00:00
access.redhat.com
9

0.136 Low

EPSS

Percentile

95.6%

KDE is a graphical desktop environment for the X Window System. Konqueror
is the file manager for the K Desktop Environment.

A source code audit performed by the KDE security team discovered several
vulnerabilities in the PCX and other image file format readers.

A buffer overflow was found in the kimgio library for KDE 3.4.0. An
attacker could create a carefully crafted PCX image in such a way that it
would cause kimgio to execute arbitrary code when processing the image.
The Common Vulnerabilities and Exposures project (cve.mitre.org) has
assigned the name CAN-2005-1046 to this issue.

All users of kdelibs should upgrade to these updated packages, which
contain a backported security patch to correct these issues.