Debian Security Advisory DSA 167-1 (Konquerer)

The remote host is missing an update to Konquerer announced via advisory DSA 167-1. OpenVAS Vulnerability Test $Id: deb1671.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 167-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

CVE-2008-0298

KHTML WebKit as used in Apple Safari 2.x allows remote attackers to cause a denial of service browser crash via a crafted web page, possibly involving a STYLE attribute of a DIV element...

Design/Logic Flaw

KHTML WebKit as used in Apple Safari 2.x allows remote attackers to cause a denial of service browser crash via a crafted web page, possibly involving a STYLE attribute of a DIV element...

CVE-2008-0298

Removed by vendor...

CVE-2008-0298

KHTML WebKit as used in Apple Safari 2.x allows remote attackers to cause a denial of service browser crash via a crafted web page, possibly involving a STYLE attribute of a DIV element...

Apple Safari KHTML WebKit远程拒绝服务漏洞

BUGTRAQ ID: 27261 Safari是苹果家族操作系统默认所捆绑的WEB浏览器。 Safari处理畸形格式的HTML文档时存在漏洞，远程攻击者可能利用此漏洞导致浏览器崩溃。 Safari没有正确地验证KHTML Webkit。如果用户受骗访问了恶意的HTML页面的话，就会导致浏览器崩溃。 Apple Safari 2.0 Apple ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.apple.com html head titleSafari Exploit/title /head body form div id="fo...

Apple Safari 2.0.4 - KHTML WebKit Remote Denial of Service

Apple Safari 2.0.4 - KHTML WebKit Remote Denial of Service source: https://www.securityfocus.com/bid/27261/info Apple Safari is prone to a remote denial-of-service vulnerability. An attacker can exploit this issue to crash the affected application, denying service to legitimate users. Apple Safar...

SuSE 10 Security Update : kdelibs3 (ZYPP Patch Number 3053)

A bug in KHTML could be exploited to conduct cross site scripting XSS attacks. CVE-2007-0537 Another bug allowed attackers to abuse the FTP passive mode for portscans. CVE-2007-1564 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc...

多个Web浏览器SSL证书SubjectAltName验证漏洞

多个WEB浏览器在处理SSL证书验证方面存在缺陷。问题是由于不正确处理针对X.509证书的subjectAltName扩展。 成功利用此漏洞当非法证书使用在SSL HTTP连接时，可绕过安全警告进行钓鱼攻击。 下面的WEB浏览器受此漏洞影响： - Mozilla Firefox, 和Gecko渲染引擎的WEB浏览器。 Opera - Konqueror, 和基于KHTML渲染引擎的浏览器如Apple's Safari. Opera Software Opera Web Browser 9.24 Opera Software Opera Web Browser 9.23 Mozilla...

GLSA-200703-10 : KHTML: XSS (XSS) vulnerability

The remote host is affected by the vulnerability described in GLSA-200703-10 KHTML: XSS XSS vulnerability The KHTML code allows for the execution of JavaScript code located inside the 'Title' HTML element, a related issue to the Safari error found by Jose Avila. Impact : When viewing a HTML page...

KHTML: Cross-site scripting (XSS) vulnerability

Background KDE is a feature-rich graphical desktop environment for Linux and Unix-like Operating Systems. KHTML is the HTML interpreter used in Konqueror and other parts of KDE. Description The KHTML code allows for the execution of JavaScript code located inside the "Title" HTML element, a relat...

Mandrake Linux Security Advisory : kdelibs (MDKSA-2006:186)

A vulnerability was discovered in the way that Qt handled pixmap images and the KDE khtml library used Qt in such a way that untrusted parameters could be passed to Qt, resulting in an integer overflow. This flaw could be exploited by a remote attacker in a malicious website that, when viewed by ...

KDE Konqueror KHTML库标题跨站脚本漏洞

Konqueror是一款多功能的浏览器，允许浏览本地和网络文件系统和全功能的WWW浏览器。 Konqueror处理WEB站点上的标题标签存在输入验证问题，远程攻击者可以利用漏洞进行跨站脚本攻击，可获得目标用户敏感信息。 构建包含恶意脚本代码的title标签，当Konqueror引用的时候可导致恶意脚本代码执行，可使目标用户敏感信息泄露。 Ubuntu Ubuntu Linux 5.10 sparc Ubuntu Ubuntu Linux 5.10 powerpc Ubuntu Ubuntu Linux 5.10 i386 Ubuntu Ubuntu Linux 5.10 amd64...

security flaw

Integer overflow in Qt 3.3 before 3.3.7, 4.1 before 4.1.5, and 4.2 before 4.2.1, as used in the KDE khtml library, kdelibs 3.1.3, and possibly other packages, allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted pixmap image...

CVE-2006-4811

Removed by vendor...

CVE-2006-4811

Integer overflow in Qt 3.3 before 3.3.7, 4.1 before 4.1.5, and 4.2 before 4.2.1, as used in the KDE khtml library, kdelibs 3.1.3, and possibly other packages, allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted pixmap image...

CVE-2006-4811

CVE-2006-4811 describes an integer overflow in Qt’s handling of certain pixmap images, affecting Qt 3.x (before 3.3.7), Qt 4.1 (before 4.1.5), and Qt 4.2 (before 4.2.1), with impact when used by KDE’s khtml/kdelibs (3.1.3) and possibly other packages. The flaw could allow a remote attacker to cra...

security flaw

Integer overflow in Qt 3.3 before 3.3.7, 4.1 before 4.1.5, and 4.2 before 4.2.1, as used in the KDE khtml library, kdelibs 3.1.3, and possibly other packages, allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted pixmap image...

kdelibs -- integer overflow in khtml

Red Hat reports: An integer overflow flaw was found in the way Qt handled pixmap images. The KDE khtml library uses Qt in such a way that untrusted parameters could be passed to Qt, triggering the overflow. An attacker could for example create a malicious web page that when viewed by a victim in...

CVE-2005-4504

The vulnerability CVE-2005-4504 affects Apple Mac OS X (10.4.3 and earlier) in the khtml::RenderTableSection::ensureRows function within KHTMLParser used by Safari and TextEdit. A remote attacker can trigger a denial of service (memory consumption and application crash) by parsing HTML files cont...