KDE kdelibs PCX Image Buffer Overflow Vulnerability

Filed under
KDE
Security

Highly Critical

Description:
Bruno Rohee has reported a vulnerability in KDE kdelibs, which potentially can be exploited by malicious people to compromise a vulnerable system.

The vulnerability is caused due to an error in the kimgio component when processing PCX image files. This may be exploited via a specially crafted image file to execute arbitrary code via an application linked against the vulnerable library.

The vulnerability has been reported in KDE 3.4.0. Other version may also be affected.

Solution:
Do not open untrusted images in applications linked against the vulnerable library.

Source