Privilege Escalation

kdelibs is vulnerable to privilege escalation. The vulnerability exists as a flaw was found in the way Konqueror handled certain FTP PASV commands. A malicious FTP server could use this flaw to perform a rudimentary port-scan of machines behind a user's firewall...

Phishing Attacks

kdebase is vulnerable to phishing attacks. The vulnerability exists as it was possible for a malicious website to cause the Konqueror address bar to display information which could trick a user into believing they are at a different website than they actually are...

Phishing Attacks

kdebase is vulnerable to phishing attacks. The vulnerability exists as it was possible for a malicious website to cause the Konqueror address bar to display information which could trick a user into believing they are at a different website than they actually are...

Denial Of Service (DoS)

kdelibs is vulnerable to denial of service DoS. The vulnerability exists as a flaw was found in KDE JavaScript implementation. A web page containing malicious JavaScript code could cause Konqueror to crash...

Cross-site Scripting (XSS)

qt is vulnerable to cross-site scripting XSS. The vulnerability exists as it was possible to prevent a Qt-based application from properly sanitizing user supplied input. This could, for example, result in a cross-site scripting attack against the Konqueror web browser...

Information Disclosure

The kdebase is vulnerable to information disclosure. A problem with the interaction between the Flash Player and the Konqueror web browser was found. The problem could lead to key presses leaking to the Flash Player applet instead of the browser...

CVE-2012-4512

The CSS parser khtml/css/cssparser.cpp in Konqueror in KDE 4.7.3 allows remote attackers to cause a denial of service crash and possibly read memory via a crafted font face source, related to "type confusion."...

CVE-2012-4512

The CSS parser khtml/css/cssparser.cpp in Konqueror in KDE 4.7.3 allows remote attackers to cause a denial of service crash and possibly read memory via a crafted font face source, related to "type confusion."...

CVE-2012-4512

CVE-2012-4512 affects Konqueror’s CSS parser (khtml/css/cssparser.cpp) in KDE 4.7.3. A remote attacker can crash the browser and possibly read memory via a crafted font-face source due to a type-confusion issue. Connected advisories (MiracleLinux AXSA-2012-970:03, SUSE/Security Advisories, Gentoo...

CVE-2012-4512

The CSS parser khtml/css/cssparser.cpp in Konqueror in KDE 4.7.3 allows remote attackers to cause a denial of service crash and possibly read memory via a crafted font face source, related to "type confusion."...

CVE-2012-4512

Removed by vendor...

[SECURITY] Fedora 29 Update: kmplayer-0.12.0b-1.fc29

KMPlayer, a simple front-end for MPlayer/FFMpeg/Phonon. It can play DVD/VCD movies, from file or URL and from a video device. KMPlayer can embed inside Konqueror. Which means if you click on a movie file, the movie is played inside Konqueror...

[SECURITY] Fedora 30 Update: kmplayer-0.12.0b-1.fc30

KMPlayer, a simple front-end for MPlayer/FFMpeg/Phonon. It can play DVD/VCD movies, from file or URL and from a video device. KMPlayer can embed inside Konqueror. Which means if you click on a movie file, the movie is played inside Konqueror...

Fedora Update for kmplayer FEDORA-2019-9b1da08d62

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

EulerOS 2.0 SP2 : pcre (EulerOS-SA-2019-1733)

According to the versions of the pcre packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - The pcreexec function in pcreexec.c in PCRE before 8.38 mishandles a // pattern with a \01 string, which allows remote attackers to cause a denial...

Heap-based Buffer Over-read

The kdelibs packages provide libraries for the K Desktop Environment KDE. Konqueror is a web browser. A heap-based buffer overflow flaw was found in the way the CSS Cascading Style Sheets parser in kdelibs parsed the location of the source for font faces. A web page containing malicious content...

EulerOS 2.0 SP3 : pcre (EulerOS-SA-2018-1167)

According to the versions of the pcre packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - The pcreexec function in pcreexec.c in PCRE before 8.38 mishandles a // pattern with a \01 string, which allows remote attackers to cause a denial...

pcre: buffer overflow caused by patterns with duplicated named groups with (?| (8.38/27)

PCRE before 8.38 mishandles certain instances of the ?| substring, which allows remote attackers to cause a denial of service unintended recursion and buffer overflow or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript RegExp object...

pcre: inefficient posix character class syntax check (8.38/16)

The pcrecompile function in pcrecompile.c in PCRE before 8.38 mishandles certain : nesting, which allows remote attackers to cause a denial of service CPU consumption or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript RegExp object...

pcre: buffer overflow caused by named forward reference to duplicate group number (8.38/30)

PCRE before 8.38 mishandles the /?|\k'Pm'|?'Pm'/ pattern and related patterns with certain forward references, which allows remote attackers to cause a denial of service buffer overflow or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript...