[SECURITY] Fedora 7 Update: kdeartwork-3.5.8-1.fc7

Additional artwork themes, sound themes, screensavers ... for KDE...

[SECURITY] Fedora 7 Update: kdeaddons-3.5.8-2.fc7

A collection of KDE Addons/Plugins, including: konq-plugins: akregator, babelfish, domtreeviewer, imagerotation, validat ors, webarchiver kate plugins kicker-applets: kbinaryclock, kolourpicker, ktimemon, mediacontrol knewsticker-scripts...

[SECURITY] Fedora 7 Update: kdeutils-3.5.8-2.fc7

Utilities for the K Desktop Environment. Includes: ark tar/gzip archive manager; kcalc scientific calculator; kcharselect character selector; kdepasswd change password; kdessh ssh front end; kdf view disk usage; kedit simple text editor; kfloppy floppy formatting tool; kgpg gpg gui khexedit hex...

[SECURITY] Fedora 7 Update: kdeadmin-3.5.8-1.fc7

The kdeadmin package includes administrative tools for the K Desktop Environment KDE including: kcron, kdat, knetworkconf, kpackage, ksysv, kuser...

[SECURITY] Fedora 7 Update: kdebindings-3.5.8-1.fc7

KDE/DCOP bindings to non-C++ languages...

[SECURITY] Fedora 7 Update: arts-1.5.8-4.fc7

arts analog real-time synthesizer is the sound system of KDE 3. The principle of arts is to create/process sound using small modules which do certain tasks. These may be create a waveform oscillators, play samples, filter data, add signals, perform effects like delay/flanger/chorus, or output the...

kdegraphics security update

CentOS Errata and Security Advisory CESA-2007:1024 Updated kdegraphics packages that fix several security issues are now available for Red Hat Enterprise Linux 4. This update has been rated as having important security impact by the Red Hat Security Response Team. The kdegraphics packages contain...

Ubuntu 5.04 / 5.10 / 6.06 LTS : libtunepimp vulnerability (USN-318-1)

Kevin Kofler discovered several buffer overflows in the tag parser. By tricking a user into opening a specially crafted tagged multimedia file such as .ogg or .mp3 music with an application that uses libtunepimp, this could be exploited to execute arbitrary code with the user's privileges. This...

Ubuntu 5.10 / 6.06 LTS / 6.10 : kdegraphics, koffice, poppler vulnerability (USN-410-1)

The poppler PDF loader library did not limit the recursion depth of the page model tree. By tricking a user into opening a specially crafter PDF file, this could be exploited to trigger an infinite loop and eventually crash an application that uses this library. kpdf in Ubuntu 5.10, and KOffice i...

[SECURITY] Fedora 8 Update: koffice-1.6.3-13.fc8

KOffice - Integrated Office Suite KOffice is a free, integrated office suite for KDE, the K Desktop Environme nt...

Memory corruption

Array index error in the DCTStream::readProgressiveDataUnit method in xpdf/Stream.cc in Xpdf 3.02pl1, as used in poppler, teTeX, KDE, KOffice, CUPS, and other products, allows remote attackers to trigger memory corruption and execute arbitrary code via a crafted PDF file...

CVE-2007-4352

Array index error in the DCTStream::readProgressiveDataUnit method in xpdf/Stream.cc in Xpdf 3.02pl1, as used in poppler, teTeX, KDE, KOffice, CUPS, and other products, allows remote attackers to trigger memory corruption and execute arbitrary code via a crafted PDF file...

CVE-2002-2333

CVE-2002-2333 affects Konqueror in KDE 2.1–3.0, including 3.0.2. A buffer overflow in the image handling (IMG tag with oversized width/height) allows a remote attacker to crash the application, causing a denial of service. The connected Red Hat and CVE records confirm the same vulnerability descr...

CVE-2003-1478

CVE-2003-1478 affects Konqueror in KDE 3.0.3. A crafted web page that starts with a 0xFF 0xFE byte sequence and many CRLFs can trigger a denial of service (core dump). Documented example uses freeze.htm. The sources note the vulnerability and impact but do not provide patch/version details or exp...

DSA-1373-2 ktorrent - directory traversal

Bulletin has no description...

GLSA-200710-08 : KOffice, KWord, KPDF, KDE Graphics Libraries: Stack-based buffer overflow

The remote host is affected by the vulnerability described in GLSA-200710-08 KOffice, KWord, KPDF, KDE Graphics Libraries: Stack-based buffer overflow KPDF includes code from xpdf that is vulnerable to an integer overflow in the StreamPredictor::StreamPredictor function. Impact : A remote attacke...

KOffice, KWord, KPDF, KDE Graphics Libraries: Stack-based buffer overflow

Background KOffice is an integrated office suite for KDE. KWord is the KOffice word processor. KPDF is a KDE-based PDF viewer included in the kdegraphics package. Description KPDF includes code from xpdf that is vulnerable to an integer overflow in the StreamPredictor::StreamPredictor function...

RHEL 4 / 5 : kdelibs (RHSA-2007:0909)

The remote Redhat Enterprise Linux 4 / 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2007:0909 advisory. The kdelibs package provides libraries for the K Desktop Environment KDE. Two cross-site-scripting flaws were found in the way Konqueror...

[SECURITY] Fedora Core 6 Update: kdelibs-3.5.7-1.fc6

Libraries for the K Desktop Environment: KDE Libraries included: kdecore KDE core library, kdeui user interface, kfm file manager, khtmlw HTML widget, kio Input/Output, networking, kspell spelling checker, jscript javascript, kab addressbook, kimgio image manipulation...

Moderate: Red Hat Security Advisory: kdelibs security update

Updated kdelibs packages that resolve several security flaws are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The kdelibs package provides libraries for the K Desktop Environment KDE. Two...