CVE-2006-6297

Stack consumption vulnerability in the KFILE JPEG kfilejpeg plugin in kdegraphics 3, as used by konqueror, digikam, and other KDE image browsers, allows remote attackers to cause a denial of service stack consumption via a crafted EXIF section in a JPEG file, which results in an infinite recursio...

CVE-2006-6297

CVE-2006-6297 affects KDE kdegraphics components, notably the kdegraphics-kfile-plugins (kfile_jpeg) used by Konqueror, digiKam and other KDE image viewers. The issue is a stack consumption/stack overflow vulnerability in the kfile_jpeg EXIF handling that can trigger a denial of service via a cra...

GLSA-200611-02 : Qt: Integer overflow

The remote host is affected by the vulnerability described in GLSA-200611-02 Qt: Integer overflow An integer overflow flaw has been found in the pixmap handling of Qt. Impact : By enticing a user to open a specially crafted pixmap image in an application using Qt, e.g. Konqueror, a remote attacke...

Qt: Integer overflow

Background Qt is a cross-platform GUI toolkit, which is used e.g. by KDE. Description An integer overflow flaw has been found in the pixmap handling of Qt. Impact By enticing a user to open a specially crafted pixmap image in an application using Qt, e.g. Konqueror, a remote attacker could be abl...

Critical: Red Hat Security Advisory: kdelibs security update

Updated kdelibs packages that correct an integer overflow flaw are now available. This update has been rated as having critical security impact by the Red Hat Security Response Team. The kdelibs package provides libraries for the K Desktop Environment KDE. Qt is a GUI software toolkit for the X...

Debian DSA-948-1 : kdelibs - buffer overflow

Maksim Orlovich discovered that the kjs JavaScript interpreter, used in the Konqueror web browser and in other parts of KDE, performs insufficient bounds checking when parsing UTF-8 encoded Uniform Resource Identifiers, which may lead to a heap based buffer overflow and the execution of arbitrary...

kdelibs -- integer overflow in khtml

Red Hat reports: An integer overflow flaw was found in the way Qt handled pixmap images. The KDE khtml library uses Qt in such a way that untrusted parameters could be passed to Qt, triggering the overflow. An attacker could for example create a malicious web page that when viewed by a victim in...

CentOS 4 : kdebase (CESA-2006:0582)

Updated kdebase packages that resolve several bugs are now available. This update has been rated as having low security impact by the Red Hat Security Response Team. The kdebase packages provide the core applications for KDE, the K Desktop Environment. These core packages include the file manager...

kdebase security update

CentOS Errata and Security Advisory CESA-2006:0582 Updated kdebase packages that resolve several bugs are now available. This update has been rated as having low security impact by the Red Hat Security Response Team. The kdebase packages provide the core applications for KDE, the K Desktop...

RHEL 4 : kdebase (RHSA-2006:0582)

Updated kdebase packages that resolve several bugs are now available. This update has been rated as having low security impact by the Red Hat Security Response Team. The kdebase packages provide the core applications for KDE, the K Desktop Environment. These core packages include the file manager...

Low: Red Hat Security Advisory: kdebase security fix

Updated kdebase packages that resolve several bugs are now available. This update has been rated as having low security impact by the Red Hat Security Response Team. The kdebase packages provide the core applications for KDE, the K Desktop Environment. These core packages include the file manager...

CVE-2006-3841

Cross-site scripting XSS vulnerability in WebScarab before 20060718-1904, when used with Microsoft Internet Explorer 6 SP2 or Konqueror 3.5.3, allows remote attackers to inject arbitrary web script or HTML via the URL, which is not sanitized before being returned in an error message when WebScara...

CVE-2006-3841

Cross-site scripting XSS vulnerability in WebScarab before 20060718-1904, when used with Microsoft Internet Explorer 6 SP2 or Konqueror 3.5.3, allows remote attackers to inject arbitrary web script or HTML via the URL, which is not sanitized before being returned in an error message when WebScara...

USN-322-1: Konqueror vulnerability

A Denial of Service vulnerability has been reported in the replaceChild method in KDE's DOM handler. A malicious remote web page could exploit this to cause Konqueror to crash...

CVE-2006-3672

KDE Konqueror 3.5.1 and earlier allows remote attackers to cause a denial of service application crash by calling the replaceChild method on a DOM object, which triggers a null dereference, as demonstrated by calling document.replaceChild with a 0 zero argument...

CVE-2006-3672

KDE Konqueror 3.5.1 and earlier allows remote attackers to cause a denial of service application crash by calling the replaceChild method on a DOM object, which triggers a null dereference, as demonstrated by calling document.replaceChild with a 0 zero argument...

CVE-2006-3672

The CVE-2006-3672 issue affects KDE Konqueror 3.5.1 and earlier, where a remote attacker can cause a denial of service (application crash) by invoking replaceChild on a DOM object, triggering a null dereference (demonstrated by document.replaceChild with a 0 argument). Affected products are KDE K...

CVE-2006-3672

KDE Konqueror 3.5.1 and earlier allows remote attackers to cause a denial of service application crash by calling the replaceChild method on a DOM object, which triggers a null dereference, as demonstrated by calling document.replaceChild with a 0 zero argument...

KDE Konqueror 3.5.x - ReplaceChild Denial of Service

KDE Konqueror 3.5.x - ReplaceChild Denial of Service source: https://www.securityfocus.com/bid/18978/info KDE Konqueror is prone to a denial-of-service vulnerability. This issue is triggered when an attacker convinces a victim user to visit a malicious website. Remote attackers may exploit this...

KDE Konqueror 3.5.x - ReplaceChild Denial of Service

source: https://www.securityfocus.com/bid/18978/info KDE Konqueror is prone to a denial-of-service vulnerability. This issue is triggered when an attacker convinces a victim user to visit a malicious website. Remote attackers may exploit this issue to crash Konqueror, effectively denying service ...