KDE Konqueror 3.0.3 - Malformed HTML Page Denial of Service

KDE Konqueror 3.0.3 - Malformed HTML Page Denial of Service source: https://www.securityfocus.com/bid/7486/info KDE Konqueror has been reported prone to a denial of service vulnerability when rendering a HTML page that contains malformed data. Although unconfirmed, code execution may be possible...

KDE Konqueror 3.0.3 - Malformed HTML Page Denial of Service

source: https://www.securityfocus.com/bid/7486/info KDE Konqueror has been reported prone to a denial of service vulnerability when rendering a HTML page that contains malformed data. Although unconfirmed, code execution may be possible. The precise technical details of this vulnerability are...

CVE-2002-2333

Buffer overflow in konqueror in KDE 2.1 through 3.0 and 3.0.2 allows remote attackers to cause a denial of service crash via an IMG tag with large width and height attributes...

CVE-2002-1151

The cross-site scripting protection for Konqueror in KDE 2.2.2 and 3.0 through 3.0.3 does not properly initialize the domains on sub-frames and sub-iframes, which can allow remote attackers to execute script and steal cookies from subframes that are in other domains...

CVE-2002-1152

Konqueror in KDE 3.0 through 3.0.2 does not properly detect the "secure" flag in an HTTP cookie, which could cause Konqueror to send the cookie across an unencrypted channel, which could allow remote attackers to steal the cookie via sniffing...

CVE-2002-0970

The SSL capability for Konqueror in KDE 3.0.2 and earlier does not verify the Basic Constraints for an intermediate CA-signed certificate, which allows remote attackers to spoof the certificates of trusted sites via a man-in-the-middle attack...

Bug in Opera and Konqueror

/----------------+--------------------------------------+------------- | sp00fed packet | | advisory 2 | +----------------+--------------------------------------+-------------+ | Product: multiply vendors browsers | | Vulnerability: buffer overflow | | Danger: low |...

Buffer overflow in Opera/Konqueror

Buffer overflow on large image scaleling...

[SECURITY] [DSA 167-1] New kdelibs fix cross site scripting bug

-------------------------------------------------------------------------- Debian Security Advisory DSA 167-1 [email protected] http://www.debian.org/security/ Martin Schulze September 16th, 2002 http://www.debian.org/security/faq -...

[SECURITY] [DSA 167-1] New kdelibs fix cross site scripting bug

-------------------------------------------------------------------------- Debian Security Advisory DSA 167-1 [email protected] http://www.debian.org/security/ Martin Schulze September 16th, 2002 http://www.debian.org/security/faq -...

DSA-167 kdelibs - cross site scripting

Bulletin has no description...

KDE Security Advisory: Konqueror Cross Site Scripting Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 KDE Security Advisory: Konqueror Cross Site Scripting Vulnerability Original Release Date: 2002-09-08 URL: http://www.kde.org/info/security/advisory-20020908-2.txt 0. References http://online.securityfocus.com/archive/1/290710/2002-09-03/2002-09-09/0 ...

Internet explorer and Konquerror frames crossite scripting

For sites with frame it's possible to execute script by spoofing location of one of frames...

MSIEv6 % encoding - Konqueror 3.0.3 also vulnerable

Hello, Test page for Konqueror is at: http://pp.siedziba.pl/2f/ I have also tested it with Mozilla 1.0 Gecko/20020829 and Galeon 1.2.5 Gecko/20020606 and found not vulnerable - the script throws "Permission denied to get property HTMLDocument.body" exception. -- Piotr Pawow mailto:[email protected]...

Crossite scripting in Internet Explorer and Konqueror

It's possible to spoof domain by using sF in URL's username: http://[email protected]/...

[SECURITY] [DSA 155-1] New kdelibs packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 155-1 [email protected] http://www.debian.org/security/ Martin Schulze August 17th, 2002 http://www.debian.org/security/faq -...

[SECURITY] [DSA 155-1] New kdelibs packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 155-1 [email protected] http://www.debian.org/security/ Martin Schulze August 17th, 2002 http://www.debian.org/security/faq -...

KDE Security Advisory: Konqueror SSL vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 KDE Security Advisory: Konqueror SSL vulnerability Original Release Date: 2002-08-18 URL: http://www.kde.org/info/security/advisory-20020818-1.txt 0. References http://online.securityfocus.com/archive/1/286290/2002-07-31/2002-08-06/0...

DSA-155 kdelibs - privacy escalation with Konqueror

Bulletin has no description...

Microsoft Internet Explorer 56 Konqueror 2.2.23.0 Weblogic Server 567 - Invalid X.509 Certificate Chain

Microsoft Internet Explorer 56 Konqueror 2.2.23.0 Weblogic Server 567 - Invalid X.509 Certificate Chain source: https://www.securityfocus.com/bid/5410/info A flaw has been reported in the handling of X.509 certificates by a number of products, including several web browsers. It may be possible fo...