Description
Buffer overflow in the VCF file information reader for KDE Personal Information Management (kdepim) suite in KDE 3.1.0 through 3.1.4 allows attackers to execute arbitrary code via a VCF file.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 3 | kdepim +1 | 6:3.1.3-3.3 | RHSA-2004:005 |
Advisories 1
- RHSA-2004:005 Red Hat Security Advisory: kdepim security update Red Hat Security Advisories (RHSA) · Jun 26, 2026
References
- oval:org.mitre.oval:def:865 vdb-entry signature
- 20040114 KDE Security Advisory: VCF file information reader vulnerability mailing-list
- GLSA-200404-02 vendor-advisory
- oval:org.mitre.oval:def:858 vdb-entry signature
- kde-kdepim-bo(14833) vdb-entry
- RHSA-2004:005 vendor-advisory
- CLA-2004:810 vendor-advisory
- MDKSA-2004:003 vendor-advisory
- VU#820798 third-party-advisory
- http://www.kde.org/info/security/advisory-20040114-1.txt
- RHSA-2004:006 vendor-advisory
- 9419 vdb-entry