CVE-2008-1671: Kde

Medium severity, CVSS 4.6. EPSS: 0.6% chance of exploitation in the next 30 days.

start_kdeinit in KDE 3.5.5 through 3.5.9, when installed setuid root, allows local users to cause a denial of service and possibly execute arbitrary code via "user-influenceable input" (probably command-line arguments) that cause start_kdeinit to send SIGUSR1 signals to other processes.

Affected products

• Kde Kde: version 3.5.5 only; version 3.5.6 only; version 3.5.7 only; version 3.5.8 only; version 3.5.9 only

Published 2008-04-28. Last modified 2026-06-16.