Vulnerability in Kde Sc

CVE-2010-1511

KGet 2.4.2 in KDE SC 4.0.0 through 4.4.3 does not properly request download confirmation from the user, which makes it easier for remote attackers to overwrite arbitrary files via a crafted metalink file.

EPSS: 0.033 (87.3th percentile) — read the EPSS interpretation.

Affected products

  • Kde Kde_sc — versions 4.4.1, 4.0.2, 4.4.0
  • Kde Kget — versions 2.4.2
  • N/a — versions n/a

Weakness classification (CWE)

References