PatchTheCVEkpopup vulnerabilities and fixes
Recent CVEs affecting kpopup, with upgrade or downgrade steps. 2 tracked.
kpopup has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2003-12-31. Highest priority: CVE-2003-1167 (score 46/100).
- CVE-2003-1170 HIGH 7.2 DOWNGRADE Format string vulnerability in main.cpp in kpopup 0.9.1 and 0.9.5pre2 allows local users to cause a denial of
- CVE-2003-1167 HIGH 7.2 DOWNGRADE misc.cpp in KPopup 0.9.1 trusts the PATH variable when executing killall, which allows local users to elevate
FAQ
How do I fix kpopup vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is kpopup being exploited right now?
None of the tracked kpopup CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which kpopup CVE should I patch first?
CVE-2003-1167 currently ranks highest (46/100): misc.cpp in KPopup 0.9.1 trusts the PATH variable when executing killall, which allows local users to elevate .