129 matches found
CVE-2006-4811
CVE-2006-4811 describes an integer overflow in Qt’s handling of certain pixmap images, affecting Qt 3.x (before 3.3.7), Qt 4.1 (before 4.1.5), and Qt 4.2 (before 4.2.1), with impact when used by KDE’s khtml/kdelibs (3.1.3) and possibly other packages. The flaw could allow a remote attacker to cra...
CVE-2006-4811
Integer overflow in Qt 3.3 before 3.3.7, 4.1 before 4.1.5, and 4.2 before 4.2.1, as used in the KDE khtml library, kdelibs 3.1.3, and possibly other packages, allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted pixmap image...
security flaw
Integer overflow in Qt 3.3 before 3.3.7, 4.1 before 4.1.5, and 4.2 before 4.2.1, as used in the KDE khtml library, kdelibs 3.1.3, and possibly other packages, allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted pixmap image...
CVE-2006-4811: Undefined Security Weakness
Integer overflow in Qt 3.3 before 3.3.7, 4.1 before 4.1.5, and 4.2 before 4.2.1, as used in the KDE khtml library, kdelibs 3.1.3, and possibly other packages, allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted pixmap image...
kdelibs -- integer overflow in khtml
Red Hat reports: An integer overflow flaw was found in the way Qt handled pixmap images. The KDE khtml library uses Qt in such a way that untrusted parameters could be passed to Qt, triggering the overflow. An attacker could for example create a malicious web page that when viewed by a victim in...
CVE-2005-4504
The vulnerability CVE-2005-4504 affects Apple Mac OS X (10.4.3 and earlier) in the khtml::RenderTableSection::ensureRows function within KHTMLParser used by Safari and TextEdit. A remote attacker can trigger a denial of service (memory consumption and application crash) by parsing HTML files cont...
Mandrake Linux Security Advisory : kdelibs (MDKSA-2005:085)
A buffer overflow in the PCX decoder of kimgio was discovered by Bruno Rohee. If an attacker could trick a user into loading a malicious PCX image with any KDE application, he could cause the execution of arbitrary code with the privileges of the user opening the image. The provided packages have...
Debian DSA-167-1 : kdelibs - XSS
A cross site scripting problem has been discovered in Konqueror, a famous browser for KDE and other programs using KHTML. The KDE team reportsthat Konqueror's cross site scripting protection fails to initialize the domains on sub-iframes correctly. As a result, JavaScript is able to access any...