Bruno Rohee has reported a vulnerability in KDE kdelibs, which potentially can be exploited by malicious people to compromise a vulnerable system.

The vulnerability is caused due to an error in the kimgio component when processing PCX image files. This may be exploited via a specially crafted image file to execute arbitrary code via an application linked against the vulnerable library.

The vulnerability affects KDE versions 3.2 through 3.4.

Solution
Apply patches.
Further details available in Customer Area

Provided and/or discovered by
Bruno Rohee

Changelog
Further details available in Customer Area

Original Advisory
KDE:
http://www.kde.org/info/security/advisory-20050421-1.txt
http://www.kde.org/info/security/advisory-20050504-1.txt
http://bugs.kde.org/show_bug.cgi?id=102328

SUSE advisory:
http://www.novell.com/linux/security/advisories/2005_22_kdelibs3.html

Deep Links
Links available in Customer Area