KDE : Security Vulnerabilities, CVEs, Published In September 2007
KMPlayer 2.9.3.1210 and earlier allows remote attackers to cause a denial of service (CPU consumption) via a .avi file with certain large "indx truck size" and nEntriesInuse values.
Max CVSS
7.1
EPSS Score
2.51%
Published
2007-09-18
Updated
2018-10-15
backend/session.c in KDM in KDE 3.3.0 through 3.5.7, when autologin is configured and "shutdown with password" is enabled, allows remote attackers to bypass the password requirement and login to arbitrary accounts via unspecified vectors.
Max CVSS
6.8
EPSS Score
0.36%
Published
2007-09-21
Updated
2017-09-29
2 vulnerabilities found