CVE-2006-6660

The nodeType function in KDE libkhtml 4.2.0 and earlier, as used by Konquerer, KMail, and other programs, allows remote attackers to cause a denial of service crash via malformed HTML tags, possibly involving a COL SPAN tag embedded in a RANGE tag...

CVE-2006-6660

The CVE concerns KDE libkhtml up to version 4.2.0 (used by Konqueror, KMail, and related apps). The nodeType function parsing HTML may be mishandled by malformed tags, potentially allowing a remote attacker to cause a denial-of-service (crash), with the impact described as partial availability im...

KDE 3.5 (libkhtml) <= 4.2.0 / Unhandled HTML Parse Exception Exploit

No description provided by source. !-- KDE 3.5 | libkhtml = 4.2.0 / Unhandled HTML Parse Exception ============================================================ Tested with Konqueror 3.5.2 and kmail 1.9.1 Federico L. Bossi Bonin [email protected] www.globalst.com.ar Program received signal...

KDE libkhtml 3.5 4.2.0 - Unhandled HTML Parse Exception

KDE libkhtml 3.5 4.2.0 - Unhandled HTML Parse Exception ::count from /usr/kde/3.5/lib/libkhtml.so.4 2 0xb64b0550 in TestFunctionImp::TestFunctionImp from /usr/kde/3.5/lib/libkhtml.so.4 3 0xb64b43a2 in TestFunctionImp::TestFunctionImp from /usr/kde/3.5/lib/libkhtml.so.4 4 0xb63329d5 in...

KDE 3.5 (libkhtml) <= 4.2.0 / Unhandled HTML Parse Exception Exploit

Exploit for linux platform in category dos / poc ==================================================================== KDE 3.5 libkhtml ::count from /usr/kde/3.5/lib/libkhtml.so.4 2 0xb64b0550 in TestFunctionImp::TestFunctionImp from /usr/kde/3.5/lib/libkhtml.so.4 3 0xb64b43a2 in...

KDE LibkHTML 4.2 - NodeType Function Denial of Service

KDE LibkHTML 4.2 - NodeType Function Denial of Service source: https://www.securityfocus.com/bid/21662/info KDE libkhtml is prone to a denial-of-service vulnerability. This issue is triggered when an attacker convinces a victim user to open a malicious HTML document via an affected application su...

KDE LibkHTML 4.2 - NodeType Function Denial of Service

source: https://www.securityfocus.com/bid/21662/info KDE libkhtml is prone to a denial-of-service vulnerability. This issue is triggered when an attacker convinces a victim user to open a malicious HTML document via an affected application such as kmail or Konqueror. Remote attackers may exploit...

KDE libkhtml 3.5 < 4.2.0 - Unhandled HTML Parse Exception

::count from /usr/kde/3.5/lib/libkhtml.so.4 2 0xb64b0550 in TestFunctionImp::TestFunctionImp from /usr/kde/3.5/lib/libkhtml.so.4 3 0xb64b43a2 in TestFunctionImp::TestFunctionImp from /usr/kde/3.5/lib/libkhtml.so.4 4 0xb63329d5 in DOM::RegisteredListenerList::getHTMLEventListener from...

Mandrake Linux Security Advisory : kdelibs (MDKSA-2006:130)

KDE Konqueror 3.5.1 and earlier allows remote attackers to cause a denial of service application crash by calling the replaceChild method on a DOM object, which triggers a null dereference, as demonstrated by calling document.replaceChild with a 0 zero argument. This issue does not affect Corpora...

kdegraphics KDE graphics library DoS

Malformed EXIF section of JPEG file causes infinite recursion with stack overflow stack memory consumption...

CVE-2006-6297

Stack consumption vulnerability in the KFILE JPEG kfilejpeg plugin in kdegraphics 3, as used by konqueror, digikam, and other KDE image browsers, allows remote attackers to cause a denial of service stack consumption via a crafted EXIF section in a JPEG file, which results in an infinite recursio...

CVE-2006-6297

Stack consumption vulnerability in the KFILE JPEG kfilejpeg plugin in kdegraphics 3, as used by konqueror, digikam, and other KDE image browsers, allows remote attackers to cause a denial of service stack consumption via a crafted EXIF section in a JPEG file, which results in an infinite recursio...

CVE-2006-6297

Stack consumption vulnerability in the KFILE JPEG kfilejpeg plugin in kdegraphics 3, as used by konqueror, digikam, and other KDE image browsers, allows remote attackers to cause a denial of service stack consumption via a crafted EXIF section in a JPEG file, which results in an infinite recursio...

KDE JPEG KFile Info插件EXIF本地拒绝服务漏洞

JPEG kfile-info插件用于多个KDE应用程序显示图象META信息。 JPEG kfile-info插件在解析图象META信息时存在问题，本地攻击者可以利用漏洞对使用此插件的应用程序进行拒绝服务攻击。 目前没有详细漏洞细节提供。 KDE KDE 3.5.5 KDE KDE 3.5.4 KDE KDE 3.5.3 KDE KDE 3.5.2 KDE KDE 3.5 KDE KDE 3.4.3 - Gentoo Linux KDE KDE 3.4.2 KDE KDE 3.4.1 + RedHat Fedora Core4 KDE KDE 3.4 KDE KDE 3.4 KDE KD...

KOffice畸形PPT文件处理整数溢出漏洞

KOffice是基于Linux的办公软件应用程序。 KOffice在处理带有畸形内容的PPT文档时存在漏洞，远程攻击者可能利用此漏洞在用户机器上执行任意指令。 KOffice的filters/olefilters/lib/klaola.cc文件中KLaola::readBigBlockDepot方法存在整数溢出漏洞。如果用户受骗打开了特制的.ppt文件的话，就会触发堆溢出，导致执行任意指令。 KDE KOffice 1.6.1 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

Weak KDE Kate / Kwrite / Kile text processors file permissions

Backup files are created with weak permissions...

Kmail-1.9.1.txt

=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= SilentHack.co.uk Vulnerability Research =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= Background: Kmail is a HTML compatible email client that comes installed by default with the KDE desktop. This DOS requires...

arts, kdelibs security update

CentOS Errata and Security Advisory CESA-2006:0720-01 Updated kdelibs packages that correct an integer overflow flaw are now available. This update has been rated as having critical security impact by the Red Hat Security Response Team. The kdelibs package provides libraries for the K Desktop...

CVE-2006-4811

Removed by vendor...

CVE-2006-4811

Integer overflow in Qt 3.3 before 3.3.7, 4.1 before 4.1.5, and 4.2 before 4.2.1, as used in the KDE khtml library, kdelibs 3.1.3, and possibly other packages, allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted pixmap image...