返回 CVE 瀏覽器

CVE-2003-0256

HIGH

7.5

CVSS Severity Score

EPSS Score0.1220%

EPSS Percentile2.14th

Published2003年5月27日

Last Modified2026年4月16日

Vulnerability Description

The GnuPG plugin in kopete before 0.6.2 does not properly cleanse the command line when executing gpg, which allows remote attackers to execute arbitrary commands.

Affected Platforms (CPE)

📦

Kde

Kopete

= 0.6.1

References & Advisories

🔗 http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000665

🔗 http://kopete.kde.org/index.php?page=newsstory&news=Kopete_releases_version_0.6.2

🔗 http://www.mandriva.com/security/advisories?name=MDKSA-2003:055

🔗 http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000665

🔗 http://kopete.kde.org/index.php?page=newsstory&news=Kopete_releases_version_0.6.2

🔗 http://www.mandriva.com/security/advisories?name=MDKSA-2003:055

相關漏洞威脅

CVE-2005-18527.5

Multiple integer overflows in libgadu, as used in Kopete in KDE 3.2.3 to 3.4.1, ekg before 1.6rc3, GNU Gadu, CenterICQ, Kadu, and ...

CVE-2003-071510.0

Heap-based buffer overflow in the Distributed Component Object Model (DCOM) interface in the RPCSS Service allows remote attackers...

CVE-2003-019610.0

Multiple buffer overflows in Samba before 2.2.8a may allow remote attackers to execute arbitrary code or cause a denial of service...

CVE-2003-030410.0

one||zero (aka One or Zero) Helpdesk 1.4 rc4 allows remote attackers to create administrator accounts by directly calling the inst...