Irresponsible Disclosure of a KDE Vulnerability on Twitter

Channel:
United Kingdom quidsup
Subscribers:
54,600
Published on ● Video Link: https://www.youtube.com/watch?v=cNuWJCMDbLU


Duration: 8:05
4,213 views
212

Dominik “zer0pwn” Penner published a KDE design flaw on Twitter. Just viewing a malicious .desktop or .directory file with Dolphin file manager can result in malicious code being executed on a users system. This vulnerability was designated CVE-2019-14744.

Sources:
https://www.zdnet.com/article/unpatched-kde-vulnerability-disclosed-on-twitter/
https://twitter.com/zer0pwn/status/1158167374799020039
https://gist.githubusercontent.com/zeropwn/630832df151029cb8f22d5b6b9efaefb/raw/64aa3d30279acb207f787ce9c135eefd5e52643b/kde-kdesktopfile-command-injection.txt
https://twitter.com/kdecommunity/status/1159224511499309056
https://kde.org/info/security/
https://kde.org/info/security/advisory-20190807-1.txt
https://mail.kde.org/pipermail/kde-announce/2019-August/000047.html
https://www.cybersecurity-help.cz/vdb/SB2019081004?affChecked=1
https://security-tracker.debian.org/tracker/source-package/kconfig
https://kubuntu.org/news/fixes-for-recent-kde-desktop-vulnerability/
https://paper.seebug.org/1008/

Wallpaper: https://www.pling.com/s/Antiques/p/1316958/

Like my channel? Please help support it:
Patreon: https://www.patreon.com/quidsup
Paypal: https://www.paypal.me/quidsup

Follow me on Social Media
Twitter: https://twitter.com/quidsup
MeWe: https://mewe.com/i/quidsup
Minds: https://minds.com/quidsup

#KDE #Vulnerability #Malware



Other Videos By quidsup


2019-09-20School District in Connecticut hit with Second Ransomware Attack
2019-09-16Arthur: The Quest for Excalibur 1989 - QuidsRetroGaming
2019-09-12Future of Internet Privacy - DNS over HTTPS (DoH)
2019-09-09Linux Terminal Basics: Remote Processes
2019-09-05Ransomware Hitting Unprepared American Cities and Schools
2019-08-30NoTrack LCD Project
2019-08-27Netrunner 19.08 Review - KDE on Debian
2019-08-24I Have Ditched Google and Moved to DuckDuckGo
2019-08-20Revisiting Running Linux on a 20 Year Old Computer
2019-08-15How Many Wormable Exploits in Microsoft’s Aug 2019 Updates
2019-08-11Irresponsible Disclosure of a KDE Vulnerability on Twitter
2019-08-07Not a “Sophisticated Cyber Attack” 🤣
2019-08-03Running Linux on a 20 Year Old Computer
2019-07-29Looking at Tracking and Analytics of Clear Linux OS
2019-07-25Getting Started with nftables Firewall in Debian
2019-07-17New Feature on NoTrack - Clickable Graphs
2019-07-11Debian 10 Buster Review with Gnome Desktop
2019-07-06Linux Surpasses Windows Server in Microsoft Azure
2019-07-03Linux File System Explained
2019-06-27Discussing How to Get a Job within Cyber Security Industry
2019-06-24Canonical will Still Support 32-bit Packages in Ubuntu 19.10


Tags:
KDE
Linux
Vulnerability
Disclosure
Malware
CVE-2019-14744
News
Quidsup