Re: kfmclient format strings issues

[George Staikos <staikos () kde org>]

On Monday 09 July 2001 03:18, KF wrote:
> I have no clue how kfmclient is used...can anyone think of a situation
> where this would be an issue? Is it called by any suids?
>
> [d0tslash@linux /tmp]$ kfmclient %x,%x,%x,%x,%x,%x
> Xlib:  extension "RENDER" missing on display ":0.0".
> Syntax Error: Unknown command
> 'bfffebd0,0,bfffebe0,bfffebf0,405731e0,40ee1c9c'

   It should not be called by any suid apps, but in any case, I have 
committed a patch to KDE CVS for this so that the error message is more 
clear.  I don't think you'll find this to be exploitable in any way...

   Please take care to inform the author of the software before posting like 
this.  We can give you all the info you need and provide patches very quickly.

-- 

George Staikos