← Back to Advisories
KDE Frameworks Command Execution
HIGH CVE-2019-14744
Dominik Penner @zer0pwn
DESCRIPTION
A critical vulnerability in KDE Frameworks allows arbitrary command execution through malicious desktop files.
DETAILS
A vulnerability in KDE Frameworks allows arbitrary command execution through specially crafted .desktop files. This could allow an attacker to execute arbitrary commands with the privileges of the user running the KDE desktop environment.
AFFECTING
- KDE Frameworks • ≤ 5.1.60