CVE-2005-0078 The KDE screen saver in KDE before 3.0.5 does not properly check the return value from a certain function call, which allows attackers with physical access to cause a crash and access the desktop sess...
MediumCVSS 4.6
EPSS 0.38%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The KDE screen saver in KDE before 3.0.5 does not properly check the return value from a certain function call, which allows attackers with physical access to cause a crash and access the desktop session.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian linux | = 3.0 | No fix listed |
| kde | = 1.0 | No fix listed |
| kde | = 1.1 | No fix listed |
| kde | = 1.1.1 | No fix listed |
| kde | = 1.1.2 | No fix listed |
| kde | = 2.0 | No fix listed |
| kde | = 2.0.1 | No fix listed |
| kde | = 2.1 | No fix listed |
| kde | = 2.1_beta1 | No fix listed |
| kde | = 2.1_beta2 | No fix listed |
| kde | = 2.2 | No fix listed |
| kde | = 2.2.1 | No fix listed |
| kde | = 2.2_beta1 | No fix listed |
| kde | = 3.0 | No fix listed |
| kde | = 3.0.1 | No fix listed |
| kde | = 3.0.2 | No fix listed |
| kde | = 3.0.3 | No fix listed |
| kde | = 3.0.4 | No fix listed |
| kde | = 3.0_beta_1 | No fix listed |
| kde | = 3.0_beta_2 | No fix listed |
| redhat enterprise linux | = 2.1 | No fix listed |
| redhat enterprise linux | = 3.0 | No fix listed |
| redhat enterprise linux desktop | = 3.0 | No fix listed |
| redhat linux advanced workstation | = 2.1 | No fix listed |
References
- DSA-660 patch vendor-advisory
- RHSA-2005:009 patch vendor-advisory
- kdebase-screensaver-security-bypass(19084) vdb-entry
- oval:org.mitre.oval:def:9260 signature vdb-entry