CVE-2003-0204

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 4.0% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2003-05-05 · updated 2026-06-16

Description

KDE 2 and KDE 3.1.1 and earlier 3.x versions allows attackers to execute arbitrary commands via (1) PostScript (PS) or (2) PDF files, related to missing -dPARANOIDSAFER and -dSAFER arguments when using the kghostview Ghostscript viewer.

Affected products

Kde: 2.0, 2.0.1, 2.1, 2.1.1, 2.1.2, 2.2 (+12)

References

http://bugs.kde.org/show_bug.cgi?id=53343
http://bugs.kde.org/show_bug.cgi?id=56808
http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000668
http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000747
http://marc.info/?l=bugtraq&m=105001557020141&w=2
http://marc.info/?l=bugtraq&m=105012994719099&w=2
http://marc.info/?l=bugtraq&m=105017403010459&w=2
http://marc.info/?l=bugtraq&m=105034222521369&w=2
http://www.debian.org/security/2003/dsa-284
http://www.debian.org/security/2003/dsa-293
http://www.debian.org/security/2003/dsa-296
http://www.kde.org/info/security/advisory-20030409-1.txt

Get alerted when CVE-2003-0204 or the next vulnerability affects your stack