Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2005-0078


The KDE screen saver in KDE before 3.0.5 does not properly check the return value from a certain function call, which allows attackers with physical access to cause a crash and access the desktop session.


Published

2005-05-02T04:00:00.000

Last Modified

2025-04-03T01:03:51.193

Status

Deferred

Source

[email protected]

Severity

CVSSv2: 4.6 (MEDIUM)

CVSSv2 Vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

  • Access Vector: LOCAL
  • Access Complexity: LOW
  • Authentication: NONE
  • Confidentiality Impact: PARTIAL
  • Integrity Impact: PARTIAL
  • Availability Impact: PARTIAL
Exploitability Score

3.9

Impact Score

6.4

Weaknesses
  • Type: Primary
    NVD-CWE-Other

Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System debian debian_linux 3.0 Yes
Operating System kde kde 1.0 Yes
Operating System kde kde 1.1 Yes
Operating System kde kde 1.1.1 Yes
Operating System kde kde 1.1.2 Yes
Operating System kde kde 2.0 Yes
Operating System kde kde 2.0.1 Yes
Operating System kde kde 2.1 Yes
Operating System kde kde 2.1_beta1 Yes
Operating System kde kde 2.1_beta2 Yes
Operating System kde kde 2.2 Yes
Operating System kde kde 2.2.1 Yes
Operating System kde kde 2.2_beta1 Yes
Operating System kde kde 3.0 Yes
Operating System kde kde 3.0.1 Yes
Operating System kde kde 3.0.2 Yes
Operating System kde kde 3.0.3 Yes
Operating System kde kde 3.0.4 Yes
Operating System kde kde 3.0_beta_1 Yes
Operating System kde kde 3.0_beta_2 Yes
Operating System redhat enterprise_linux 2.1 Yes
Operating System redhat enterprise_linux 2.1 Yes
Operating System redhat enterprise_linux 2.1 Yes
Operating System redhat enterprise_linux 3.0 Yes
Operating System redhat enterprise_linux 3.0 Yes
Operating System redhat enterprise_linux 3.0 Yes
Operating System redhat enterprise_linux_desktop 3.0 Yes
Operating System redhat linux_advanced_workstation 2.1 Yes

References