KDE kdelibs PCX Image Buffer Overflow Vulnerability

Filed under

Highly Critical

Bruno Rohee has reported a vulnerability in KDE kdelibs, which potentially can be exploited by malicious people to compromise a vulnerable system.

The vulnerability is caused due to an error in the kimgio component when processing PCX image files. This may be exploited via a specially crafted image file to execute arbitrary code via an application linked against the vulnerable library.

The vulnerability has been reported in KDE 3.4.0. Other version may also be affected.

Do not open untrusted images in applications linked against the vulnerable library.