[Full-disclosure] Konqueror DoS Via JavaScript Read Of FTP Iframe

Summary Konqueror crashes if JavaScript code tries to read the source of a child iframe which is set to an ftp:// URL. Impact It is possible for malicious websites to crash Konqueror and possibly other applications with rely on KJS. Details The KDE JavaScript implementation, KJS has been found to...

KDE Konqueror 3.5 - JavaScript IFrame Denial of Service

source: https://www.securityfocus.com/bid/22814/info KDE Konqueror is prone to a remote denial-of-service vulnerability because of an error in KDE's JavaScript implementation. An attacker may exploit this vulnerability to cause Konquerer to crash, resulting in denial-of-service conditions...

KDE Konqueror 3.5.7 - Assert Denial of Service

source: https://www.securityfocus.com/bid/25170/info KDE Konqueror is prone to a remote denial-of-service vulnerability because it fails to handle improperly formated HTML code. An attacker may exploit this vulnerability to cause Konqueror to crash, resulting in denial-of-service conditions...

Konqueror 3.5.5 - JavaScript Read of FTP Iframe Denial of Service

Demo of how to make Konqueror 3.5.5 crash by [email protected]. Simply load this file in Konqueror. Vulnerable versions should segfault instantly with a null pointer exception. readiframe = functioniframename var banner = document.getElementByIdiframename.contentWindow.document.body.innerHTML;...

MDKA-2007:002 : kdeutils

A bug in the kdeutils-ark package prevented the creation of a zip format archive using Konqueror, or from ark directly. Updated packages have been patched to correct this issue. %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security...

Mandrake Linux Security Advisory : kdelibs (MDKSA-2006:186)

A vulnerability was discovered in the way that Qt handled pixmap images and the KDE khtml library used Qt in such a way that untrusted parameters could be passed to Qt, resulting in an integer overflow. This flaw could be exploited by a remote attacker in a malicious website that, when viewed by ...

Mandrake Linux Security Advisory : kdelibs (MDKSA-2007:031)

Konqueror 3.5.5 does not properly parse HTML comments in title tags, which allows remote attackers to conduct cross-site scripting XSS attacks and bypass some XSS protection schemes by embedding certain HTML tags within a comment, a related issue to CVE-2007-0478. Updated packages have been patch...

KDE Konqueror KHTML库标题跨站脚本漏洞

Konqueror是一款多功能的浏览器，允许浏览本地和网络文件系统和全功能的WWW浏览器。 Konqueror处理WEB站点上的标题标签存在输入验证问题，远程攻击者可以利用漏洞进行跨站脚本攻击，可获得目标用户敏感信息。 构建包含恶意脚本代码的title标签，当Konqueror引用的时候可导致恶意脚本代码执行，可使目标用户敏感信息泄露。 Ubuntu Ubuntu Linux 5.10 sparc Ubuntu Ubuntu Linux 5.10 powerpc Ubuntu Ubuntu Linux 5.10 i386 Ubuntu Ubuntu Linux 5.10 amd64...

USN-420-1: KDE library vulnerability

Jose Avila III and Robert Tasarz discovered that the KDE HTML library did not correctly parse HTML comments inside the "title" tag. By tricking a Konqueror user into visiting a malicious website, an attacker could bypass cross-site scripting protections...

Cross site scripting

The KDE HTML library kdelibs, as used by Konqueror 3.5.5, does not properly parse HTML comments, which allows remote attackers to conduct cross-site scripting XSS attacks and bypass some XSS protection schemes by embedding certain HTML tags within a comment in a title tag, a related issue to...

CVE-2007-0537

The KDE HTML library kdelibs, as used by Konqueror 3.5.5, does not properly parse HTML comments, which allows remote attackers to conduct cross-site scripting XSS attacks and bypass some XSS protection schemes by embedding certain HTML tags within a comment in a title tag, a related issue to...

CVE-2007-0537

The KDE HTML library kdelibs, as used by Konqueror 3.5.5, does not properly parse HTML comments, which allows remote attackers to conduct cross-site scripting XSS attacks and bypass some XSS protection schemes by embedding certain HTML tags within a comment in a title tag, a related issue to...

CVE-2007-0537

CVE-2007-0537 affects KDE kdelibs (used by Konqueror 3.5.5); the vulnerability arises from improper parsing of HTML comments, enabling remote XSS and bypassing some protections by embedding certain tags within a comment in a title tag. Documented in multiple advisories (Mandrake/MDKSA, RHSA, Open...

Apple Safari / Konqueror SCRIPT tag filtering bypass

Brower follows script tags within HTML comment. It violates HTML standard...

KDE LibkHTML NodeType函数拒绝服务漏洞

KDE是一款流行的桌面管理程序。 KDE libkhtml NodeType函数存在安全问题，远程攻击者可以利用漏洞对应用程序进行拒绝服务攻击。 攻击者必须使用恶意HTML页，诱使用户使用kmail或Konqueror访问来触发。目前没有详细漏洞细节提供。 KDE Libkhtml 4.2 KDE Konqueror 3.5.2 KDE kmail 1.9.1 http://www.kde.org/...

KDE libkhtml 3.5 4.2.0 - Unhandled HTML Parse Exception

KDE libkhtml 3.5 4.2.0 - Unhandled HTML Parse Exception ::count from /usr/kde/3.5/lib/libkhtml.so.4 2 0xb64b0550 in TestFunctionImp::TestFunctionImp from /usr/kde/3.5/lib/libkhtml.so.4 3 0xb64b43a2 in TestFunctionImp::TestFunctionImp from /usr/kde/3.5/lib/libkhtml.so.4 4 0xb63329d5 in...

KDE libkhtml 3.5 < 4.2.0 - Unhandled HTML Parse Exception

::count from /usr/kde/3.5/lib/libkhtml.so.4 2 0xb64b0550 in TestFunctionImp::TestFunctionImp from /usr/kde/3.5/lib/libkhtml.so.4 3 0xb64b43a2 in TestFunctionImp::TestFunctionImp from /usr/kde/3.5/lib/libkhtml.so.4 4 0xb63329d5 in DOM::RegisteredListenerList::getHTMLEventListener from...

KDE LibkHTML 4.2 - NodeType Function Denial of Service

source: https://www.securityfocus.com/bid/21662/info KDE libkhtml is prone to a denial-of-service vulnerability. This issue is triggered when an attacker convinces a victim user to open a malicious HTML document via an affected application such as kmail or Konqueror. Remote attackers may exploit...

Mandrake Linux Security Advisory : kdelibs (MDKSA-2006:130)

KDE Konqueror 3.5.1 and earlier allows remote attackers to cause a denial of service application crash by calling the replaceChild method on a DOM object, which triggers a null dereference, as demonstrated by calling document.replaceChild with a 0 zero argument. This issue does not affect Corpora...

CVE-2006-6297

Stack consumption vulnerability in the KFILE JPEG kfilejpeg plugin in kdegraphics 3, as used by konqueror, digikam, and other KDE image browsers, allows remote attackers to cause a denial of service stack consumption via a crafted EXIF section in a JPEG file, which results in an infinite recursio...