CVE-2003-1167: Gernot Stocker Kpopup

High severity, CVSS 7.2. EPSS: 1% chance of exploitation in the next 30 days.

misc.cpp in KPopup 0.9.1 trusts the PATH variable when executing killall, which allows local users to elevate their privileges by modifying the PATH variable to reference a malicious killall program.

Affected products

• Gernot Stocker Kpopup: version 0.9.1 only; version 0.9.5_pre2 only

Published 2003-12-31. Last modified 2026-06-16.