CVE-2005-0754: Conectiva Linux

High severity, CVSS 7.5. EPSS: 3% chance of exploitation in the next 30 days.

Kommander in KDE 3.2 through KDE 3.4.0 executes data files without confirmation from the user, which allows remote attackers to execute arbitrary code.

Affected products

• Conectiva Linux: version 9.0 only; version 10.0 only
• Gentoo Linux: any version
• Kde Kde: version 3.2 only; version 3.2.1 only; version 3.2.2 only; version 3.2.3 only; version 3.3 only; version 3.3.1 only; …
• Kde Quanta: version 3.1 only
• Red Hat Fedora Core: version core_3.0 only
• Ubuntu Ubuntu Linux: version 4.1 only; version 5.04 only

Published 2005-04-22. Last modified 2026-06-16.