CVE-2010-1511

KGet 2.4.2 in KDE SC 4.0.0 through 4.4.3 does not properly request download confirmation from the user, which makes it easier for remote attackers to overwrite arbitrary files via a crafted metalink file.

• CWE-264

• http://lists.fedoraproject.org/pipermail/package-announce/2010-November/051692.html
• http://marc.info/?l=oss-security&m=127378789518426&w=2
• http://osvdb.org/64689
• http://secunia.com/advisories/39528Vendor Advisory
• http://secunia.com/advisories/39787Vendor Advisory
• http://secunia.com/secunia_research/2010-70/Vendor Advisory
• http://securitytracker.com/id?1023984
• http://www.kde.org/info/security/advisory-20100513-1.txtVendor Advisory
• http://www.securityfocus.com/archive/1/511279/100/0/threaded
• http://www.securityfocus.com/archive/1/511294/100/0/threaded
• http://www.securityfocus.com/bid/40141
• http://www.ubuntu.com/usn/USN-938-1
• http://www.vupen.com/english/advisories/2010/1142Vendor Advisory
• http://www.vupen.com/english/advisories/2010/1144Vendor Advisory
• http://www.vupen.com/english/advisories/2010/3096Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/58629
• http://lists.fedoraproject.org/pipermail/package-announce/2010-November/051692.html
• http://marc.info/?l=oss-security&m=127378789518426&w=2
• http://osvdb.org/64689
• http://secunia.com/advisories/39528Vendor Advisory
• http://secunia.com/advisories/39787Vendor Advisory
• http://secunia.com/secunia_research/2010-70/Vendor Advisory
• http://securitytracker.com/id?1023984
• http://www.kde.org/info/security/advisory-20100513-1.txtVendor Advisory
• http://www.securityfocus.com/archive/1/511279/100/0/threaded
• http://www.securityfocus.com/archive/1/511294/100/0/threaded
• http://www.securityfocus.com/bid/40141
• http://www.ubuntu.com/usn/USN-938-1
• http://www.vupen.com/english/advisories/2010/1142Vendor Advisory
• http://www.vupen.com/english/advisories/2010/1144Vendor Advisory
• http://www.vupen.com/english/advisories/2010/3096Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/58629

Published

May 17, 2010

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2010-1505Google Chrome before 4.1.249.1059 does not prevent pages fro…
• CVE-2010-1506The Google V8 bindings in Google Chrome before 4.1.249.1059 …
• CVE-2010-1507WebYaST in yast2-webclient in SUSE Linux Enterprise (SLE) 11…
• CVE-2010-1508Heap-based buffer overflow in Apple QuickTime before 7.6.9 o…
• CVE-2010-1509IrfanView before 4.27 does not properly handle an unspecifie…
• CVE-2010-1510Heap-based buffer overflow in IrfanView before 4.27 allows r…
• CVE-2010-1512Directory traversal vulnerability in aria2 before 1.9.3 allo…
• CVE-2010-1513Multiple integer overflows in src/image.c in Ziproxy before …
• CVE-2010-1514Unrestricted file upload vulnerability in TomatoCMS 2.0.6 an…
• CVE-2010-1515Multiple cross-site scripting (XSS) vulnerabilities in index…
• CVE-2010-1516Multiple integer overflows in SWFTools 0.9.1 allow remote at…
• CVE-2010-1517The GIGABYTE Dldrv2 ActiveX control 1.4.206.11 allows remote…