Launchpad.net

CVE 2005-0754

Kommander in KDE 3.2 through KDE 3.4.0 executes data files without confirmation from the user, which allows remote attackers to execute arbitrary code.

See the CVE page on Mitre.org for more details.

References