Overview
KDE Personal Information Management suite "kdepim" contains a buffer overflow vulnerability. Exploitation of this vulnerability could lead to the arbitrary execution of commands.
Description
KDE Personal Information Management suite shipped with KDE versions 3.1.0 through 3.1.4 contains a buffer overflow vulnerability in the processing of VCF files. If an attacker can trick a victim into opening a specially crafted .VCF file, the attacker may be able to gain information about a victim's data or execute arbitrary commands |
Impact
An attacker may be able to gain information about a victim's data or execute arbitrary commands with the victim's privileges. |
Solution
Upgrade to KDE version 3.1.5 or apply the patch to version 3.1.4. |
Vendor Information
CVSS Metrics
| Group | Score | Vector |
|---|---|---|
| Base | ||
| Temporal | ||
| Environmental |
References
Acknowledgements
This vulnerability was discovered by Dirk Mueller of KDE and reported in their advisory.
This document was written by Stacey Stewart.
Other Information
| CVE IDs: | CVE-2003-0988 |
| Severity Metric: | 8.10 |
| Date Public: | 2004-01-14 |
| Date First Published: | 2004-01-27 |
| Date Last Updated: | 2004-01-27 20:10 UTC |
| Document Revision: | 11 |