Konqueror 3.5.5 - JavaScript Read of FTP Iframe Denial of Service

Konqueror 3.5.5 - JavaScript Read of FTP Iframe Denial of Service Demo of how to make Konqueror 3.5.5 crash by [email protected]. Simply load this file in Konqueror. Vulnerable versions should segfault instantly with a null pointer exception. readiframe = functioniframename var banner =...

Konqueror 3.5.5 - JavaScript Read of FTP Iframe Denial of Service

Demo of how to make Konqueror 3.5.5 crash by [email protected]. Simply load this file in Konqueror. Vulnerable versions should segfault instantly with a null pointer exception. readiframe = functioniframename var banner = document.getElementByIdiframename.contentWindow.document.body.innerHTML;...

KDE Konqueror 3.5.7 - Assert Denial of Service

source: https://www.securityfocus.com/bid/25170/info KDE Konqueror is prone to a remote denial-of-service vulnerability because it fails to handle improperly formated HTML code. An attacker may exploit this vulnerability to cause Konqueror to crash, resulting in denial-of-service conditions...

KDE Konqueror 3.5 - JavaScript IFrame Denial of Service

source: https://www.securityfocus.com/bid/22814/info KDE Konqueror is prone to a remote denial-of-service vulnerability because of an error in KDE's JavaScript implementation. An attacker may exploit this vulnerability to cause Konquerer to crash, resulting in denial-of-service conditions...

MDKA-2007:002 : kdeutils

A bug in the kdeutils-ark package prevented the creation of a zip format archive using Konqueror, or from ark directly. Updated packages have been patched to correct this issue. %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security...

Mandrake Linux Security Advisory : kdelibs (MDKSA-2006:186)

A vulnerability was discovered in the way that Qt handled pixmap images and the KDE khtml library used Qt in such a way that untrusted parameters could be passed to Qt, resulting in an integer overflow. This flaw could be exploited by a remote attacker in a malicious website that, when viewed by ...

Mandrake Linux Security Advisory : kdelibs (MDKSA-2007:031)

Konqueror 3.5.5 does not properly parse HTML comments in title tags, which allows remote attackers to conduct cross-site scripting XSS attacks and bypass some XSS protection schemes by embedding certain HTML tags within a comment, a related issue to CVE-2007-0478. Updated packages have been patch...

KDE Konqueror KHTML库标题跨站脚本漏洞

Konqueror是一款多功能的浏览器，允许浏览本地和网络文件系统和全功能的WWW浏览器。 Konqueror处理WEB站点上的标题标签存在输入验证问题，远程攻击者可以利用漏洞进行跨站脚本攻击，可获得目标用户敏感信息。 构建包含恶意脚本代码的title标签，当Konqueror引用的时候可导致恶意脚本代码执行，可使目标用户敏感信息泄露。 Ubuntu Ubuntu Linux 5.10 sparc Ubuntu Ubuntu Linux 5.10 powerpc Ubuntu Ubuntu Linux 5.10 i386 Ubuntu Ubuntu Linux 5.10 amd64...

USN-420-1: KDE library vulnerability

Jose Avila III and Robert Tasarz discovered that the KDE HTML library did not correctly parse HTML comments inside the "title" tag. By tricking a Konqueror user into visiting a malicious website, an attacker could bypass cross-site scripting protections...

Cross site scripting

The KDE HTML library kdelibs, as used by Konqueror 3.5.5, does not properly parse HTML comments, which allows remote attackers to conduct cross-site scripting XSS attacks and bypass some XSS protection schemes by embedding certain HTML tags within a comment in a title tag, a related issue to...

CVE-2007-0537

The KDE HTML library kdelibs, as used by Konqueror 3.5.5, does not properly parse HTML comments, which allows remote attackers to conduct cross-site scripting XSS attacks and bypass some XSS protection schemes by embedding certain HTML tags within a comment in a title tag, a related issue to...

CVE-2007-0537

The KDE HTML library kdelibs, as used by Konqueror 3.5.5, does not properly parse HTML comments, which allows remote attackers to conduct cross-site scripting XSS attacks and bypass some XSS protection schemes by embedding certain HTML tags within a comment in a title tag, a related issue to...

CVE-2007-0537

CVE-2007-0537 affects KDE kdelibs (used by Konqueror 3.5.5); the vulnerability arises from improper parsing of HTML comments, enabling remote XSS and bypassing some protections by embedding certain tags within a comment in a title tag. Documented in multiple advisories (Mandrake/MDKSA, RHSA, Open...

Apple Safari / Konqueror SCRIPT tag filtering bypass

Brower follows script tags within HTML comment. It violates HTML standard...

KDE LibkHTML NodeType函数拒绝服务漏洞

KDE是一款流行的桌面管理程序。 KDE libkhtml NodeType函数存在安全问题，远程攻击者可以利用漏洞对应用程序进行拒绝服务攻击。 攻击者必须使用恶意HTML页，诱使用户使用kmail或Konqueror访问来触发。目前没有详细漏洞细节提供。 KDE Libkhtml 4.2 KDE Konqueror 3.5.2 KDE kmail 1.9.1 http://www.kde.org/...

KDE LibkHTML 4.2 - NodeType Function Denial of Service

source: https://www.securityfocus.com/bid/21662/info KDE libkhtml is prone to a denial-of-service vulnerability. This issue is triggered when an attacker convinces a victim user to open a malicious HTML document via an affected application such as kmail or Konqueror. Remote attackers may exploit...

KDE libkhtml 3.5 4.2.0 - Unhandled HTML Parse Exception

KDE libkhtml 3.5 4.2.0 - Unhandled HTML Parse Exception ::count from /usr/kde/3.5/lib/libkhtml.so.4 2 0xb64b0550 in TestFunctionImp::TestFunctionImp from /usr/kde/3.5/lib/libkhtml.so.4 3 0xb64b43a2 in TestFunctionImp::TestFunctionImp from /usr/kde/3.5/lib/libkhtml.so.4 4 0xb63329d5 in...

KDE libkhtml 3.5 < 4.2.0 - Unhandled HTML Parse Exception

::count from /usr/kde/3.5/lib/libkhtml.so.4 2 0xb64b0550 in TestFunctionImp::TestFunctionImp from /usr/kde/3.5/lib/libkhtml.so.4 3 0xb64b43a2 in TestFunctionImp::TestFunctionImp from /usr/kde/3.5/lib/libkhtml.so.4 4 0xb63329d5 in DOM::RegisteredListenerList::getHTMLEventListener from...

Mandrake Linux Security Advisory : kdelibs (MDKSA-2006:130)

KDE Konqueror 3.5.1 and earlier allows remote attackers to cause a denial of service application crash by calling the replaceChild method on a DOM object, which triggers a null dereference, as demonstrated by calling document.replaceChild with a 0 zero argument. This issue does not affect Corpora...

CVE-2006-6297

Stack consumption vulnerability in the KFILE JPEG kfilejpeg plugin in kdegraphics 3, as used by konqueror, digikam, and other KDE image browsers, allows remote attackers to cause a denial of service stack consumption via a crafted EXIF section in a JPEG file, which results in an infinite recursio...