Most recent entries from all

bdu:2019-03649

cnvd-2019-31342

EUVD-2026-56580

fkie_cve-2019-14744

In KDE Frameworks KConfig before 5.61.0, malicious desktop files and configuration files lead to code execution with minimal user interaction. This relates to libKF5ConfigCore.so, and the mishandling of .desktop and .directory files, as demonstrated by a shell command on an Icon line in a .desktop file.

GHSA-7r6x-j8mj-9g3p

gsd-2019-14744

OESA-2021-1295 — kf5-kconfig security update

Affected: openEuler:20.03-LTS-SP1: kf5-kconfig

KDE Frameworks 5 Tier 1 addon with advanced configuration system made of two parts: KConfigCore and KConfigGui. Security Fix(es): In KDE Frameworks KConfig before 5.61.0, malicious desktop files and configuration files lead to code execution with minimal user interaction. This relates to libKF5ConfigCore.so, and the mishandling of .desktop and .directory files, as demonstrated by a shell command on an Icon line in a .desktop file.(CVE-2019-14744)

openSUSE-SU-2019:1851-1 — Security update for kconfig, kdelibs4

Security update for kconfig, kdelibs4

RHSA-2020:2833 — Red Hat Security Advisory: kdelibs security update

kdelibs: malicious desktop files and configuration files lead to code execution with minimal user interaction

UBUNTU-CVE-2019-14744

Affected: Ubuntu:Pro:14.04:LTS: kde4libs, Ubuntu:16.04:LTS: kconfig, Ubuntu:16.04:LTS: kde4libs, Ubuntu:18.04:LTS: kconfig, Ubuntu:18.04:LTS: kde4libs