CVE-2002-1247: Kde

High severity, CVSS 7.2. EPSS: 0.5% chance of exploitation in the next 30 days.

Buffer overflow in LISa allows local users to gain access to a raw socket via a long LOGNAME environment variable for the resLISa daemon.

Affected products

  • Kde Kde: version 2.0 only; version 2.1 only; version 2.2 only; version 3.0 only; version 3.0.1 only; version 3.0.2 only; …
  • Kde Klisa: version 2.2.2 only
  • Lisa Lisa: version 0.1 only; version 0.1.2 only

Published 2002-11-29. Last modified 2026-06-16.