4 matches found
CVE-2012-4515
Use-after-free vulnerability in khtml/rendering/renderreplaced.cpp in Konqueror in KDE 4.7.3, when the context menu is shown, allows remote attackers to cause a denial of service crash and possibly execute arbitrary code by accessing an iframe when it is being updated...
PT-2012-5453
Name of the Vulnerable Software and Affected Versions Konqueror in KDE version 4.7.3 Description The issue is related to a use-after-free vulnerability in the khtml/rendering/render replaced.cpp file. This vulnerability can be triggered when the context menu is shown and an iframe is being update...
Debian DSA-167-1 : kdelibs - XSS
A cross site scripting problem has been discovered in Konqueror, a famous browser for KDE and other programs using KHTML. The KDE team reportsthat Konqueror's cross site scripting protection fails to initialize the domains on sub-iframes correctly. As a result, JavaScript is able to access any...