CVE-2011-1586: Kde Sc

Medium severity, CVSS 5.8. EPSS: 3.1% chance of exploitation in the next 30 days.

Directory traversal vulnerability in the KGetMetalink::File::isValidNameAttr function in ui/metalinkcreator/metalinker.cpp in KGet in KDE SC 4.6.2 and earlier allows remote attackers to create arbitrary files via a .. (dot dot) in the name attribute of a file element in a metalink file. NOTE: this vulnerability exists because of an incomplete fix for CVE-2010-1000.

Affected products

• Kde Kde Sc: up to and including 4.6.2; version 2.2.0 only; version 3.5.10 only; version 4.0.0 only; version 4.0.1 only; version 4.0.2 only; …

Published 2011-04-27. Last modified 2026-06-16.