KDE 4.3.3 KDELibs 'dtoa()' Remote Code Execution Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/37080/info KDE is prone to a remote code-execution vulnerability that affects KDELibs. Successful exploits may allow an attacker to execute arbitrary code. Failed attacks may cause denial-of-service conditions. NOTE: This...

Opera Web Browser 7.54 KDE KFMCLIENT Remote Command Execution Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/11901/info It is reported that Opera for Linux is susceptible to a remote command execution vulnerability. This issue is due to a default configuration setting in Opera that utilizes the KDE 'kfmclient' utility to open...

KDE KMail 1.7.1 HTML EMail Remote Email Content Spoofing Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/13085/info A remote email message content spoofing vulnerability affects KDE KMail. This issue is due to a failure of the application to properly sanitize HTML email messages. An attacker may leverage this issue to spoof...

KDE 3.5 (libkhtml) <= 4.2.0 / Unhandled HTML Parse Exception Exploit

No description provided by source. !-- KDE 3.5 | libkhtml = 4.2.0 / Unhandled HTML Parse Exception ============================================================ Tested with Konqueror 3.5.2 and kmail 1.9.1 Federico L. Bossi Bonin [email protected] www.globalst.com.ar Program received signal...

KDE Konqueror 4.1 Multiple Cross-Site Scripting and Denial of Service Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/33085/info KDE Konqueror is prone to multiple cross-site scripting vulnerabilities and multiple denial-of-service vulnerabilities because the application fails to sufficiently sanitize user-supplied input. An attacker may...

SeaMonkey 1.1.8 - Remote Array Overrun

No description provided by source. From Full Disclosure: http://seclists.org/fulldisclosure/2009/Nov/221 -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SeaMonkey 1.1.8 Remote Array Overrun Arbitrary code execution Author: Maksymilian Arciemowicz and sp3x http://SecurityReason.com Date: - - Dis.:...

KDE 1.1/1.1.1/1.2/2.0 kscd SHELL Environmental Variable Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/1206/info Some linux distributions S.u.S.E. 6.4 reported ship with kscd a CD player for the KDE Desktop sgid disk. kscd uses the contents of the 'SHELL' environment variable to execute a browser. This makes it possible to...

KDE Konqueror 3.5.x ReplaceChild Denial of Service Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/18978/info KDE Konqueror is prone to a denial-of-service vulnerability. This issue is triggered when an attacker convinces a victim user to visit a malicious website. Remote attackers may exploit this issue to crash...

GLSA-201406-34 : KDE Libraries: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201406-34 KDE Libraries: Multiple vulnerabilities Multiple vulnerabilities have been discovered in KDE Libraries. Please review the CVE identifiers referenced below for details. Impact : A remote attacker could cause a...

KDE Libraries: Multiple vulnerabilities

Background KDE is a feature-rich graphical desktop environment for Linux and Unix-like operating systems. KDE Libraries contains libraries needed by all KDE applications. Description Multiple vulnerabilities have been discovered in KDE Libraries. Please review the CVE identifiers referenced below...

Konqueror: Multiple vulnerabilities

Background Konqueror is the KDE web browser and file manager. Description Multiple vulnerabilities have been discovered in Konqueror. Please review the CVE identifiers referenced below for details. Impact A remote attacker could entice a user to open a specially crafted web site using Konqueror,...

KDirStat: Arbitrary command execution

Background KDirStat is a graphical disk usage utility for KDE. Description Missing escape of executable shell command in KDirStat can be used to insert malicious shell commands. Impact A local attacker could possibly execute arbitrary shell command with the privileges of the process. Workaround...

openSUSE Security Update : kdebase4-workspace (openSUSE-SU-2013:1253-1)

Added changesetra2bab28a.diff from upstream 4.11 branch, fixes kde321576 - Added kdm-kcheckpass-Check-for-NULL-return-from-crypt-3-an.pat ch, bnc829857, CVE-2013-4132 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from...

[SECURITY] Fedora 20 Update: smb4k-1.1.2-1.fc20

Smb4K is an SMB/CIFS share browser for KDE. It uses the Samba software suit e to access the SMB/CIFS shares of the local network neighborhood. Its purpose i s to provide a program that's easy to use and has as many features as possible...

[SECURITY] Fedora 19 Update: smb4k-1.1.2-1.fc19

Smb4K is an SMB/CIFS share browser for KDE. It uses the Samba software suit e to access the SMB/CIFS shares of the local network neighborhood. Its purpose i s to provide a program that's easy to use and has as many features as possible...

CVE-2014-0190

The GIF decoder in QtGui in Qt before 5.3 allows remote attackers to cause a denial of service NULL pointer dereference via invalid width and height values in a GIF image...

pidgin-knotify: Arbitrary code execution

Background pidgin-knotify is a Pidgin plug-in to display message notifications in KDE. Description pidgin-knotify does not properly sanitize shell metacharacters from received messages. Impact A remote attacker could send a specially crafted instant message, possibly resulting in execution of...

Arch Linux Penetration Testers Layer: ArchAssault

Arch Linux Penetration Testers Layer 2014-09-30 – Tyler Bennett We have released a new iso, its updated with our latest tools. We have updated our custom kernel to 3.16.3, as well. We have corrected the size issue on the x8664 ISO, allowing it to be burned to a single layer DVD. Official Note: Th...

CVE-2013-2074

kioslave/http/http.cpp in KIO in kdelibs 4.10.3 and earlier allows attackers to discover credentials via a crafted request that triggers an "internal server error," which includes the username and password in an error message...

CVE-2013-3713

The image creation configuration in aaabase before 16.26.1 for openSUSE 13.1 KDE adds the root user to the "users" group when installing from a live image, which allows local users to obtain sensitive information and possibly have other unspecified impacts, as demonstrated by reading /etc/shadow...