CVE catalog
CVE-2004-0411
kdelibs - unsanitised input
- Severity
- Unknown
- Published
- Updated
- Source
- [NVD] · [CVE record]
- EPSS
- 7.78% · Oct 25, 2026
The URI handlers in Konqueror for KDE 3.2.2 and earlier do not properly filter "-" characters that begin a hostname in a (1) telnet, (2) rlogin, (3) ssh, or (4) mailto URI, which allows remote attackers to manipulate the options that are passed to the associated programs, possibly to read arbitrary files or execute arbitrary code. security flaw
Vulnerable and fixed packages
Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.
| Distribution | Package | Release | Version | Status |
|---|---|---|---|---|
| Debian | kdelibs | 3.0 | 4:2.2.2-13.woody.10 | fixed |
Fixed-version evidence
| Distribution | Package | Type | Release | Fixed version | Urgency | Origin | Bugs |
|---|---|---|---|---|---|---|---|
| Debian | kdelibs | deb | 3.0 | 4:2.2.2-13.woody.10 | Not reported | DSA-518 | Not reported |
OpenFactory catalog packages
No matching packages in this catalog.
Observed: