Vulnerability in Kde

CVE-2008-1671

start_kdeinit in KDE 3.5.5 through 3.5.9, when installed setuid root, allows local users to cause a denial of service and possibly execute arbitrary code via "user-influenceable input" (probably command-line arguments) that cause start_kdeinit to send SIGUSR1 signals to other processes.

EPSS: 0.006 (46.4th percentile) — read the EPSS interpretation.

Affected products

  • Kde — versions 3.5.5, 3.5.6, 3.5.7
  • N/a — versions n/a

Weakness classification (CWE)

References