CVE catalog

CVE-2002-1393

kdepim - several vulnerabilities

[CVE catalog]

Severity
Unknown
Published
Updated
Source
[NVD] · [CVE record]
EPSS
3.67% · Oct 27, 2026

Multiple vulnerabilities in KDE 2 and KDE 3.x through 3.0.5 do not quote certain parameters that are inserted into a shell command, which could allow remote attackers to execute arbitrary commands via (1) URLs, (2) filenames, or (3) e-mail addresses. security flaw

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debiankdenetwork3.02.2.2-14.6fixed
Debiankdeutils3.02.2.2-9.2fixed
Debiankdesdk3.02.2.2-3.2fixed
Debiankdeadmin3.02.2.2-7.2fixed
Debiankdelibs3.02.2.2-13.woody.6fixed
Debiankdebase3.02.2.2-14.2fixed
Debiankdemultimedia3.02.2.2-8.2fixed
Debiankdegames3.02.2.2-2.2fixed
Debiankdegraphics3.02.2.2-6.10fixed
Debiankdepim3.02.2.2-5.2fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debiankdenetworkdeb3.02.2.2-14.6Not reportedDSA-237Not reported
Debiankdeutilsdeb3.02.2.2-9.2Not reportedDSA-241Not reported
Debiankdesdkdeb3.02.2.2-3.2Not reportedDSA-239Not reported
Debiankdeadmindeb3.02.2.2-7.2Not reportedDSA-234Not reported
Debiankdelibsdeb3.02.2.2-13.woody.6Not reportedDSA-236Not reported
Debiankdebasedeb3.02.2.2-14.2Not reportedDSA-242Not reported
Debiankdemultimediadeb3.02.2.2-8.2Not reportedDSA-243Not reported
Debiankdegamesdeb3.02.2.2-2.2Not reportedDSA-240Not reported
Debiankdegraphicsdeb3.02.2.2-6.10Not reportedDSA-235Not reported
Debiankdepimdeb3.02.2.2-5.2Not reportedDSA-238Not reported

OpenFactory catalog packages

No matching packages in this catalog.

Observed:

References

[FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX]