← Back

Kpopup

kpopup

Vendor: Gernot Stocker • 2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2003-1170
1Gernot Stocker
1Kpopup
Apr 16, 2026
Dec 31, 2003
N/A· v4
N/A· v3
7.2 HIGH· v2
Format string vulnerability in main.cpp in kpopup 0.9.1 and 0.9.5pre2 allows local users to cause a denial of service (segmentation fault) and possibly execute arbitrary code via format string specifiers in command line...Show more
Format string vulnerability in main.cpp in kpopup 0.9.1 and 0.9.5pre2 allows local users to cause a denial of service (segmentation fault) and possibly execute arbitrary code via format string specifiers in command line arguments.Show less
CVE-2003-1167
1Gernot Stocker
1Kpopup
Apr 16, 2026
Dec 31, 2003
N/A· v4
N/A· v3
7.2 HIGH· v2
misc.cpp in KPopup 0.9.1 trusts the PATH variable when executing killall, which allows local users to elevate their privileges by modifying the PATH variable to reference a malicious killall program.