TITLE: KDE kpdf Splash Image Handling Buffer Overflow SECUNIA ADVISORY ID: SA18707 VERIFY ADVISORY: http://secunia.com/advisories/18707/ CRITICAL: Moderately critical IMPACT: DoS, System access WHERE: >From remote SOFTWARE: KDE 3.x http://secunia.com/product/219/ DESCRIPTION: A vulnerability has been reported in KDE, which can be exploited by malicious people to cause a DoS (Denial of Service) and potentially compromise a user's system. For more information: SA18677 The vulnerability affects KDE 3.4.0 through KDE 3.5.1. SOLUTION: Apply patches. Patch for KDE 3.5.1: ftp://ftp.kde.org/pub/kde/security_patches/post-3.5.1-kdegraphics-CVE-2006-0301.diff bc7dc2a5235f95a41fc1d7ab885899da Patch for KDE 3.4.3: ftp://ftp.kde.org/pub/kde/security_patches/post-3.4.3-kdegraphics-CVE-2006-0301.diff ebbce0a49537b694932b3c0efcf18261 ORIGINAL ADVISORY: http://www.kde.org/info/security/advisory-20060202-1.txt OTHER REFERENCES: SA18677: http://secunia.com/advisories/18677/ ---------------------------------------------------------------------- About: This Advisory was delivered by Secunia as a free service to help everybody keeping their systems up to date against the latest vulnerabilities. Subscribe: http://secunia.com/secunia_security_advisories/ Definitions: (Criticality, Where etc.) http://secunia.com/about_secunia_advisories/ Please Note: Secunia recommends that you verify all advisories you receive by clicking the link. Secunia NEVER sends attached files with advisories. Secunia does not advise people to install third party patches, only use those supplied by the vendor. ---------------------------------------------------------------------- Unsubscribe: Secunia Security Advisories http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org ----------------------------------------------------------------------