Oval Definition:oval:com.redhat.rhsa:def:20040005
Revision Date:2004-01-05Version:502
Title:RHSA-2004:005: kdepim security update (Important)
Description:The K Desktop Environment (KDE) is a graphical desktop for the X Window System. The KDE Personal Information Management (kdepim) suite helps you to organize your mail, tasks, appointments, and contacts.

The KDE team found a buffer overflow in the file information reader of VCF files. An attacker could construct a VCF file so that when it was opened by a victim it would execute arbitrary commands. The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the name CAN-2003-0988 to this issue.

Users of kdepim are advised to upgrade to these erratum packages which contain a backported security patch that corrects this issue.
Family:unixClass:patch
Status:Reference(s):CVE-2003-0988
RHSA-2004:005-01
Platform(s):Red Hat Enterprise Linux 3
Product(s):
Definition Synopsis
  • Red Hat Enterprise Linux 3 is installed
  • AND Package Information
  • kdepim-devel is earlier than 6:3.1.3-3.3
  • AND kdepim-devel is signed with Red Hat master key
  • OR
  • kdepim is earlier than 6:3.1.3-3.3
  • AND kdepim is signed with Red Hat master key
  • BACK