CVE-2012-4514

CVE-2012-4514 affects Konqueror in KDE (via rendering/render_replaced.cpp) and is triggered by a crafted web page, allowing a remote attacker to cause a denial of service through a NULL pointer dereference in KDE versions prior to 4.9.3. The issue is tracked across multiple advisories (e.g., Fedo...

CVE-2012-4513

khtml/imload/scaledimageplane.h in Konqueror in KDE 4.7.3 allows remote attackers to cause a denial of service crash and possibly read memory via large canvas dimensions, which leads to an unexpected sign extension and a heap-based buffer over-read...

CVE-2012-4515

CVE-2012-4515 indicates a use-after-free in Konqueror’s KDE 4.7.3 (khtml/rendering/render_replaced.cpp) triggered while the context menu is shown; accessing an updating iframe could crash the process and may allow code execution. Connected advisories (openSUSE/SUSE Gentoo/OpenVAS) reference kdeli...

[SECURITY] Fedora 18 Update: kdelibs-4.9.2-11.fc18

Libraries for KDE 4...

CentOS Update for kdelibs CESA-2012:1418 centos6

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Konqueror 4.7.3 Memory Corruption

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Nth Dimension Security Advisory NDSA20121010 Date: 10th October 2012 Author: Tim Brown URL: / Product: Konqueror 4.7.3 Vendor: KDE Risk: Medium Summary The Konqueror web browser is vulnerable to a number of memory corruption vulnerabilities. This...

kdelibs security update

CentOS Errata and Security Advisory CESA-2012:1418 Updated kdelibs packages that fix two security issues are now available for Red Hat Enterprise Linux 6 FasTrack. The Red Hat Security Response Team has rated this update as having critical security impact. Common Vulnerability Scoring System CVSS...

Critical: Red Hat Security Advisory: kdelibs security update

Updated kdelibs packages that fix two security issues are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having critical security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are...

Slackware: Security Advisory (SSA:2003-213-01)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Slackware Advisory SSA:2003-213-01 KDE packages updated

The remote host is missing an update as announced via advisory SSA:2003-213-01. OpenVAS Vulnerability Test $Id: esoftslkssa200321301.nasl 6598 2017-07-07 09:36:44Z cfischer $ Description: Auto-generated from the corresponding slackware advisory Authors: Thomas Reinke Copyright: Copyright c 2012...

Slackware: Security Advisory (SSA:2004-247-01)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mandrake Linux Security Advisory : kdesu (MDKSA-2001:018)

A problem exists with the kdesu program for KDE versions 1 and 2. kdesu is a frontend for the su program, allowing normal users to run programs with root privileges by prompting for the root password. When the 'keep password' option is enabled, kdesu tries to send the password across process...

CVE-2011-5129

Heap-based buffer overflow in XChat 2.8.9 and earlier allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a long response string...

Fedora Update for kde-partitionmanager FEDORA-2012-5873

Check for the Version of kde-partitionmanager OpenVAS Vulnerability Test Fedora Update for kde-partitionmanager FEDORA-2012-5873 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it...

Fedora Update for kde-partitionmanager FEDORA-2012-5873

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

USN-1526-1: KOffice vulnerability

It was discovered that KOffice incorrectly handled certain malformed MS Word documents. If a user or automated system were tricked into opening a crafted MS Word file, an attacker could cause a denial of service or execute arbitrary code with privileges of the user invoking the program...

Wireless Security Auditing: Fern Wifi Cracker

Fern Wifi Cracker is a Wireless security auditing and attack software program written using the Python Programming Language and the Python Qt GUI library , the program is able to crack and recover WEP/WPA/WPS keys and also run other network based attacks on wireless or ethernet based networks Fer...

CVE-2012-3413

The HTMLQuoteColorer::process function in messageviewer/htmlquotecolorer.cpp in KDE PIM 4.6 through 4.8 does not disable JavaScript, Java, and Plugins, which allows remote attackers to inject arbitrary web script or HTML via a crafted email...

Hardcoded credentials

The HTMLQuoteColorer::process function in messageviewer/htmlquotecolorer.cpp in KDE PIM 4.6 through 4.8 does not disable JavaScript, Java, and Plugins, which allows remote attackers to inject arbitrary web script or HTML via a crafted email...

CVE-2012-3413

CVE-2012-3413 affects KDE PIM (kdepim) 4.6–4.8 where HTMLQuoteColorer::process does not disable JavaScript, Java, and browser plugins in HTML mail, enabling remote code or HTML injection via crafted emails. Connected advisories indicate a remediation: the Fedora update (FEDORA-2012-10411) patches...