SuSE 10 Security Update : KDE (ZYPP Patch Number 4433)

Users could log in as root without having to enter the password if auto login was enabled and if kdm was configured to require the root passwort to shutdown the system. CVE-2007-4569 JavaScript code could modify the URL in the address bar to make the currently displayed website appear to come fro...

AMD64 x86 emulation Qt library: Multiple vulnerabilities

Background Qt is a cross-platform GUI framework, which is used e.g. by KDE. The AMD64 x86 emulation Qt library packages Qt libraries for 32bit x86 emulation on AMD64. Description The Qt versions used by the AMD64 x86 emulation Qt libraries were vulnerable to several flaws GLSA 200708-16, GLSA...

[SECURITY] Fedora 8 Update: htdig-3.2.0b6-13.fc8

The ht://Dig system is a complete world wide web indexing and searching system for a small domain or intranet. This system is not meant to replace the need for powerful internet-wide search systems like Lycos, Infoseek, Webcrawler and AltaVista. Instead it is meant to cover the search needs for a...

多个Web浏览器SSL证书SubjectAltName验证漏洞

多个WEB浏览器在处理SSL证书验证方面存在缺陷。问题是由于不正确处理针对X.509证书的subjectAltName扩展。 成功利用此漏洞当非法证书使用在SSL HTTP连接时，可绕过安全警告进行钓鱼攻击。 下面的WEB浏览器受此漏洞影响： - Mozilla Firefox, 和Gecko渲染引擎的WEB浏览器。 Opera - Konqueror, 和基于KHTML渲染引擎的浏览器如Apple's Safari. Opera Software Opera Web Browser 9.24 Opera Software Opera Web Browser 9.23 Mozilla...

GLSA-200711-22 : Poppler, KDE: User-assisted execution of arbitrary code

The remote host is affected by the vulnerability described in GLSA-200711-22 Poppler, KDE: User-assisted execution of arbitrary code Alin Rad Pop Secunia Research discovered several vulnerabilities in the 'Stream.cc' file of Xpdf: An integer overflow in the DCTStream::reset method and a boundary...

Poppler, KDE: User-assisted execution of arbitrary code

Background Poppler is a cross-platform PDF rendering library originally based on Xpdf. KOffice is an integrated office suite for KDE. KWord is the KOffice word processor. KPDF is a KDE-based PDF viewer included in the kdegraphics package. Description Alin Rad Pop Secunia Research discovered sever...

KDE Konqueror Cookie处理拒绝服务漏洞

Konqueror是一款多功能的浏器，允许浏览本地和网络文件系统和全功能的WWW浏览器。 Konqueror处理COOKIE存在问题，远程攻击者可以利用漏洞对应用程序进行拒绝服务攻击。 当发送超大COOKIE，Konqueror处理时可导致崩溃，造成拒绝服务攻击。 KDE Konqueror 3.5.6 目前没有解决方案提供： http://www.konqueror.org/ ?php iniset"memorylimit","200M"; setcookie"hifox", strrepeat"A",19999999; ?...

CVE-2007-6000

KDE Konqueror 3.5.6 and earlier allows remote attackers to cause a denial of service crash via large HTTP cookie parameters...

CVE-2007-6000

KDE Konqueror 3.5.6 and earlier allows remote attackers to cause a denial of service crash via large HTTP cookie parameters...

CVE-2007-6000

KDE Konqueror 3.5.6 and earlier allows remote attackers to cause a denial of service crash via large HTTP cookie parameters...

CVE-2007-6000

CVE-2007-6000 affects KDE Konqueror up to version 3.5.6, allowing remote attackers to trigger a denial of service (crash) by sending large HTTP cookie parameters. Affected software: Konqueror (KDE desktop) prior to 3.5.7(?) with reliance on cookie handling. Root cause details are not extensively ...

KDE Konqueror 3.5.6 - Cookie Handling Denial of Service

KDE Konqueror 3.5.6 - Cookie Handling Denial of Service source: https://www.securityfocus.com/bid/26435/info KDE Konqueror is prone to a remote denial-of-service vulnerability because it fails to handle overly large cookies. An attacker may exploit this vulnerability to cause Konqueror to crash,...

KDE Konqueror 3.5.6 - Cookie Handling Denial of Service

source: https://www.securityfocus.com/bid/26435/info KDE Konqueror is prone to a remote denial-of-service vulnerability because it fails to handle overly large cookies. An attacker may exploit this vulnerability to cause Konqueror to crash, resulting in denial-of-service conditions. Konqueror 3.5...

KDE Konqueror cookie buffer overflow

Buffer overflow on oversized cookie...

Fedora 7 : arts-1.5.8-4.fc7 / kde-i18n-3.5.8-1.fc7 / kdeaccessibility-3.5.8-2.fc7 / etc (2007-2985)

This is an update to the latest kde-3.5.8 release. For more details, see http://kde.org/announcements/announce-3.5.8.php This also addresses a security issue in kpdf, that can cause crashes or possibly execute arbitrary code, see http://www.kde.org/info/security/advisory-20071107-1.txt Note that...

[SECURITY] Fedora 7 Update: kdegames-3.5.8-3.fc7

Games and gaming libraries for the K Desktop Environment. Included with this package are: kenolaba, kasteroids, kblackbox, kmahjongg, kmines, konquest, kpat, kpoker, kreversi, ksame, kshisen, ksmiletris, ksnake, ksirtet, katomic, kjumpingcube, ktuberling...

[SECURITY] Fedora 7 Update: kde-i18n-3.5.8-1.fc7

Internationalization support for KDE...

[SECURITY] Fedora 7 Update: kdemultimedia-3.5.8-8.fc7

The K Desktop Environment KDE is a GUI desktop for the X Window System. The kdemultimedia package contains multimedia applications for KDE, including: kmid, a midi player kmix, an audio mixer arts, additional functionality for the aRts sound system krec, a recording tool kscd, an Audio-CD player...

[SECURITY] Fedora 7 Update: kdetoys-3.5.8-1.fc7

Includes: amor: Amusing Misuse Of Resources put's comic figures above your windows eyesapplet: a kicker applet similar to XEyes fifteenapplet: kicker applet, order 15 pieces in a 4x4 square by moving t hem kmoon: system tray applet showing the moon phase kodo: mouse movement meter kteatime: syste...

[SECURITY] Fedora 7 Update: kdelibs-3.5.8-7.fc7

Libraries for the K Desktop Environment: KDE Libraries included: kdecore KDE core library, kdeui user interface, kfm file manager, khtmlw HTML widget, kio Input/Output, networking, kspell spelling checker, jscript javascript, kab addressbook, kimgio image manipulation...