Mandrake Linux Security Advisory : kdelibs (MDKSA-2006:019)

A heap overflow vulnerability was discovered in kjs, the KDE JavaScript interpretter engine. An attacker could create a malicious web site that contained carefully crafted JavaScript code that could trigger the flaw and potentially lead to the arbitrary execution of code as the user visiting the...

CVE-2006-0019

CVE-2006-0019 affects KDE kdelibs/kjs (KDE 3.2.0–3.5.0). The vulnerability is a heap-based overflow in encodeURI/decodeURI when parsing UTF-8 URIs, allowing remote code execution. CVSS v2 base 7.5 (NETWORK, LOW complexity, no auth). OpenVAS and vendor advisories (Debian DSA-948-1; Gentoo GLSA 200...

Critical: Red Hat Security Advisory: kdelibs security update

Updated kdelibs packages are now available for Red Hat Enterprise Linux 4. This update has been rated as having critical security impact by the Red Hat Security Response Team. kdelibs contains libraries for the K Desktop Environment KDE. A heap overflow flaw was discovered affecting kjs, the...