VDB

RHSA-2003%3A146

RHSA-2003%3A146 PUBLISHED CVSS 9.300000190734863 CRITICAL

KDE 2 and KDE 3.1.1 and earlier 3.x versions allows attackers to execute arbitrary commands via (1) PostScript (PS) or (2) PDF files, related to missing -dPARANOIDSAFER and -dSAFER arguments when using the kghostview Ghostscript viewer.

Risk Scores

CVSS 4.0
9.300000190734863
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Affected Products

VendorProductVersions
Red HatRed Hat Enterprise Linux ES version 2.1
Red HatRed Hat Linux Advanced Workstation 2.1
Red HatRed Hat Enterprise Linux AS (Advanced Server) version 2.1
Red HatRed Hat Enterprise Linux WS version 2.1

Timeline

  • May 22, 2003 CVE Published
  • Nov 21, 2025 CVE Updated
  • Aug 7, 2026 Distribution Patch
  • Aug 7, 2026 Distribution Patch
  • Aug 7, 2026 Security Advisory
  • Aug 7, 2026 Security Advisory
Open in Interactive Console →
$ Console Community · 100/wk Open console ›