Description
Buffer overflow in the kimgio library for KDE 3.4.0 allows remote attackers to execute arbitrary code via a crafted PCX image file.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 3.0 | kdelibs | 4:2.2.2-13.woody.14 | DSA-714-1 |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 4 | kdelibs +1 | 6:3.3.1-3.10 | RHSA-2005:393 |
Advisories 2
- RHSA-2005:393 Red Hat Security Advisory: kdelibs security update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- DSA-714-1 kdelibs - several Debian Security (DSA / DLA) · Mar 9, 2026
References
- oval:org.mitre.oval:def:11081 vdb-entry signature
- SUSE-SA:2005:022 vendor-advisory
- oval:org.mitre.oval:def:5802 vdb-entry signature
- http://www.kde.org/info/security/advisory-20050421-1.txt
- FLSA:178606 vendor-advisory
- ADV-2005-0331 vdb-entry
- 14908 third-party-advisory
- 201320 vendor-advisory
- DSA-714 vendor-advisory
- 28114 third-party-advisory
- 103170 vendor-advisory
- http://bugs.kde.org/show_bug.cgi?id=102328
- 13096 vdb-entry
- RHSA-2005:393 vendor-advisory
- ADV-2007-4241 vdb-entry