Format string vulnerability in kvt in KDE 1.1.2 may allow local users to execute arbitrary commands via a DISPLAY environmental variable that contains formatting characters.
Link | Tags |
---|---|
http://www.securityfocus.com/archive/1/83914 | mailing list patch |
http://www.securityfocus.com/bid/1700 | vdb entry patch vendor advisory |