The KDE program Konquerer allows for browsing SMB shares comfortably through the GUI. By placing a shortcut to an SMB share on KDE’s desktop, an attacker can disclose his victim’s password in plaintext.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/35201/kdeSMB.txt
Source: https://packetstormsecurity.com/files/35201/kdeSMB.txt.html