Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
In KDE Frameworks KConfig before 5.61.0, malicious desktop files and configuration files lead to code execution with minimal user interaction. This relates to libKF5ConfigCore.so, and the mishandling of .desktop and .directory files, as demonstrated by a shell command on an Icon line in a .desktop file.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
KDE Frameworks KConfig 命令注入漏洞
Vulnerability Description
KDE Frameworks是KDE社区的一个KDE应用程序的技术基础库和软件框架的集合。KConfig是其中的一个高级配置系统，它主要用于管理KDE Frameworks中的配置并生成配置文件。 KDE Frameworks KConfig 5.61.0之前版本中存在安全漏洞。攻击者可借助恶意的桌面文件和配置文件利用该漏洞执行代码。
CVSS Information
N/A
Vulnerability Type
N/A