Description
Kommander in KDE 3.2 through KDE 3.4.0 executes data files without confirmation from the user, which allows remote attackers to execute arbitrary code.
References
- http://www.kde.org/info/security/advisory-20050420-1.txt
- 20050422 [KDE Security Advisory]: Kommander untrusted code execution mailing-list
- 15060 third-party-advisory
- 13313 vdb-entry