Information disclosure

The FTP protocol implementation in Konqueror 3.5.5 allows remote servers to force the client to connect to other servers, perform a proxied port scan, or obtain sensitive information by specifying an alternate server address in an FTP PASV response...

CVE-2007-1564

The FTP protocol implementation in Konqueror 3.5.5 allows remote servers to force the client to connect to other servers, perform a proxied port scan, or obtain sensitive information by specifying an alternate server address in an FTP PASV response...

Code injection

Konqueror 3.5.5 allows remote attackers to cause a denial of service crash by using JavaScript to read a child iframe having an ftp:// URI...

CVE-2007-1564

The FTP protocol implementation in Konqueror 3.5.5 allows remote servers to force the client to connect to other servers, perform a proxied port scan, or obtain sensitive information by specifying an alternate server address in an FTP PASV response...

CVE-2007-1565

CVE-2007-1565 affects Konqueror 3.5.5. The vulnerability occurs when JavaScript can read a child iframe with an ftp:// URI, allowing remote attackers to cause a denial of service (crash). Affected component is Konqueror’s handling of iframes/JavaScript; root cause is improper handling of FTP-rela...

CVE-2007-1565

Konqueror 3.5.5 allows remote attackers to cause a denial of service crash by using JavaScript to read a child iframe having an ftp:// URI...

CVE-2007-1564

CVE-2007-1564 concerns Konqueror 3.5.5’s FTP protocol handling. The vulnerability arises when a remote FTP server supplies an overly crafted PASV response, which can force the Konqueror client to connect to arbitrary servers. This behavior could enable a nearby attacker to perform a proxied port-...

KDE Konqueror 3.xIOSlave - FTP PASV Port-Scanning

KDE Konqueror 3.xIOSlave - FTP PASV Port-Scanning source: https://www.securityfocus.com/bid/23091/info KDE Konqueror is prone to a vulnerability that may allow attackers to obtain potentially sensitive information. A successful exploit of this issue would cause the affected application to connect...

KDE Konqueror 3.x/IOSlave - FTP PASV Port-Scanning

source: https://www.securityfocus.com/bid/23091/info KDE Konqueror is prone to a vulnerability that may allow attackers to obtain potentially sensitive information. A successful exploit of this issue would cause the affected application to connect to arbitrary TCP ports and potentially reveal...

GLSA-200703-10 : KHTML: XSS (XSS) vulnerability

The remote host is affected by the vulnerability described in GLSA-200703-10 KHTML: XSS XSS vulnerability The KHTML code allows for the execution of JavaScript code located inside the 'Title' HTML element, a related issue to the Safari error found by Jose Avila. Impact : When viewing a HTML page...

Mandrake Linux Security Advisory : kdelibs (MDKSA-2007:054)

ecma/kjshtml.cpp in KDE JavaScript KJS, as used in Konqueror, allows remote attackers to cause a denial of service crash by accessing the content of an iframe with an ftp:// URI in the src attribute, probably due to a NULL pointer dereference. Updated packages have been patched to address this...

KHTML: Cross-site scripting (XSS) vulnerability

Background KDE is a feature-rich graphical desktop environment for Linux and Unix-like Operating Systems. KHTML is the HTML interpreter used in Konqueror and other parts of KDE. Description The KHTML code allows for the execution of JavaScript code located inside the "Title" HTML element, a relat...

Konqueror 3.5.5 (JavaScript Read of FTP Iframe) DoS Exploit

No description provided by source. Demo of how to make Konqueror 3.5.5 crash by [email protected]. Simply load this file in Konqueror. Vulnerable versions should segfault instantly with a null pointer exception. readiframe = functioniframename var banner =...

CVE-2007-1308

ecma/kjshtml.cpp in KDE JavaScript KJS, as used in Konqueror in KDE 3.5.5, allows remote attackers to cause a denial of service crash by accessing the content of an iframe with an ftp:// URI in the src attribute, probably due to a NULL pointer dereference...

CVE-2007-1308

ecma/kjshtml.cpp in KDE JavaScript KJS, as used in Konqueror in KDE 3.5.5, allows remote attackers to cause a denial of service crash by accessing the content of an iframe with an ftp:// URI in the src attribute, probably due to a NULL pointer dereference...

CVE-2007-1308

CVE-2007-1308 affects KDE Konqueror's JavaScript engine (KJS) in KDE 3.5.5, allowing a remote user to cause a denial of service (crash) by loading an iframe with an ftp:// URI in the src attribute (NULL pointer dereference). Concrete details and affected components are documented in connected adv...

KDE Konqueror 3.5 - JavaScript IFrame Denial of Service

KDE Konqueror 3.5 - JavaScript IFrame Denial of Service source: https://www.securityfocus.com/bid/22814/info KDE Konqueror is prone to a remote denial-of-service vulnerability because of an error in KDE's JavaScript implementation. An attacker may exploit this vulnerability to cause Konquerer to...

[Full-disclosure] Konqueror DoS Via JavaScript Read Of FTP Iframe

Summary Konqueror crashes if JavaScript code tries to read the source of a child iframe which is set to an ftp:// URL. Impact It is possible for malicious websites to crash Konqueror and possibly other applications with rely on KJS. Details The KDE JavaScript implementation, KJS has been found to...

KDE Konqueror 3.5.7 - Assert Denial of Service

KDE Konqueror 3.5.7 - Assert Denial of Service source: https://www.securityfocus.com/bid/25170/info KDE Konqueror is prone to a remote denial-of-service vulnerability because it fails to handle improperly formated HTML code. An attacker may exploit this vulnerability to cause Konqueror to crash,...

Konqueror 3.5.5 (JavaScript Read of FTP Iframe) DoS Exploit

Exploit for linux platform in category dos / poc =========================================================== Konqueror 3.5.5 JavaScript Read of FTP Iframe DoS Exploit =========================================================== Demo of how to make Konqueror 3.5.5 crash by email protected Simply lo...