CVE-2000-0918 in kvt
Summary
Format string vulnerability in kvt in KDE 1.1.2 may allow local users to execute arbitrary commands via a DISPLAY environmental variable that contains formatting characters.
If you want to get the best quality for vulnerability data then you always have to consider VulDB.