CVE-2006-4811

CVE-2006-4811 describes an integer overflow in Qt’s handling of certain pixmap images, affecting Qt 3.x (before 3.3.7), Qt 4.1 (before 4.1.5), and Qt 4.2 (before 4.2.1), with impact when used by KDE’s khtml/kdelibs (3.1.3) and possibly other packages. The flaw could allow a remote attacker to cra...

kdelibs security update

CentOS Errata and Security Advisory CESA-2006:0720 Updated kdelibs packages that correct an integer overflow flaw are now available. This update has been rated as having critical security impact by the Red Hat Security Response Team. The kdelibs package provides libraries for the K Desktop...

[Full-disclosure] Kmail <= 1.9.1 (table/frameset) DOS

=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= SilentHack.co.uk Vulnerability Research =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= Background: Kmail is a HTML compatible email client that comes installed by default with the KDE desktop. This DOS requires...

Debian DSA-1019-1 : koffice - several vulnerabilities

Derek Noonburg has fixed several potential vulnerabilities in xpdf, the Portable Document Format PDF suite, which is also present in koffice, the KDE Office Suite. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debia...

CVE-2006-3742

The KDE PAM configuration shipped with Fedora Core 5 causes KDM passwords to be cached, which allows attackers to login without a password by attempting to log in multiple times...

CVE-2006-3742

The KDE PAM configuration shipped with Fedora Core 5 causes KDM passwords to be cached, which allows attackers to login without a password by attempting to log in multiple times...

CVE-2006-3742

The CVE-2006-3742 issue affects the KDE PAM configuration shipped with Fedora Core 5, where KDM passwords are cached. This allows an attacker to gain access by attempting to log in multiple times without a password, effectively bypassing authentication. The description is supported by multiple so...

DSA-1156 kdebase

Bulletin has no description...

RHEL 4 : kdebase (RHSA-2006:0582)

Updated kdebase packages that resolve several bugs are now available. This update has been rated as having low security impact by the Red Hat Security Response Team. The kdebase packages provide the core applications for KDE, the K Desktop Environment. These core packages include the file manager...

CVE-2006-2933

CVE-2006-2933 affects kdebase’s kdesktop_lock in KDE on Red Hat Enterprise Linux 3 (pre-3.1.3-5.11). The issue is that kdesktop_lock can fail to terminate properly, potentially blocking manual desktop locking or preventing the screensaver from activating. Public documentation across multiple sour...

kdebase security update

CentOS Errata and Security Advisory CESA-2006:0576 Updated kdebase packages that resolve a security issue are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The kdebase packages provide the core applications for KDE, the K Deskt...

USN-322-1: Konqueror vulnerability

A Denial of Service vulnerability has been reported in the replaceChild method in KDE's DOM handler. A malicious remote web page could exploit this to cause Konqueror to crash...

CVE-2006-3672

KDE Konqueror 3.5.1 and earlier allows remote attackers to cause a denial of service application crash by calling the replaceChild method on a DOM object, which triggers a null dereference, as demonstrated by calling document.replaceChild with a 0 zero argument...

CVE-2006-3672

KDE Konqueror 3.5.1 and earlier allows remote attackers to cause a denial of service application crash by calling the replaceChild method on a DOM object, which triggers a null dereference, as demonstrated by calling document.replaceChild with a 0 zero argument...

CVE-2006-3672

The CVE-2006-3672 issue affects KDE Konqueror 3.5.1 and earlier, where a remote attacker can cause a denial of service (application crash) by invoking replaceChild on a DOM object, triggering a null dereference (demonstrated by document.replaceChild with a 0 argument). Affected products are KDE K...

CVE-2006-3672

KDE Konqueror 3.5.1 and earlier allows remote attackers to cause a denial of service application crash by calling the replaceChild method on a DOM object, which triggers a null dereference, as demonstrated by calling document.replaceChild with a 0 zero argument...

KDE Konqueror 3.5.x - ReplaceChild Denial of Service

KDE Konqueror 3.5.x - ReplaceChild Denial of Service source: https://www.securityfocus.com/bid/18978/info KDE Konqueror is prone to a denial-of-service vulnerability. This issue is triggered when an attacker convinces a victim user to visit a malicious website. Remote attackers may exploit this...

KDE Konqueror 3.5.x - ReplaceChild Denial of Service

source: https://www.securityfocus.com/bid/18978/info KDE Konqueror is prone to a denial-of-service vulnerability. This issue is triggered when an attacker convinces a victim user to visit a malicious website. Remote attackers may exploit this issue to crash Konqueror, effectively denying service ...

USN-318-1: libtunepimp vulnerability

Kevin Kofler discovered several buffer overflows in the tag parser. By tricking a user into opening a specially crafted tagged multimedia file such as .ogg or .mp3 music with an application that uses libtunepimp, this could be exploited to execute arbitrary code with the user's privileges. This...

CentOS 4 : kdebase (CESA-2006:0548)

Updated kdebase packages that correct a security flaw in kdm are now available for Red Hat Enterprise Linux 4. This update has been rated as having important security impact by the Red Hat Security Response Team. The kdebase packages provide the core applications for KDE, the K Desktop Environmen...