CVE:CVE-2005-0754
CNNVD:CNNVD-200504-084
Kommander是一款用于编辑和解释虚拟对话框并执行对话框操作附带脚本的虚拟编辑器和解释器。
Kommander未经用户确认便执行不可信任位置的数据文件。
由于这些文件可能包含有代码，因此用户可能无意中执行任意代码。
solution:Upgrade kde quanta to a higher version than 3.1,and avoid the version 3.1; Upgrade conectiva linux to a higher version than 9.0,10.0,and avoid the version 9.0,10.0; Upgrade gentoo linux to a higher version than *; Upgrade kde kde to a higher version than 3.2,3.2.1,3.2.2,3.2.3,3.3,3.3.1,3.3.2,3.4,and avoid the version 3.2,3.2.1,3.2.2,3.2.3,3.3,3.3.1,3.3.2,3.4; Upgrade redhat fedora_core to a higher version than core_3.0,and avoid the version core_3.0; Upgrade ubuntu ubuntu_linux to a higher version than 4.1,5.04,and avoid the version 4.1,5.04