CVE-2011-1168

2011-04-1100:00:00

ubuntu.com

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.004 Low

EPSS

Percentile

74.7%

JSON

Cross-site scripting (XSS) vulnerability in the KHTMLPart::htmlError
function in khtml/khtml_part.cpp in Konqueror in KDE SC 4.4.0 through 4.6.1
allows remote attackers to inject arbitrary web script or HTML via the URI
in a URL corresponding to an unavailable web site.

Bugs

<https://bugs.launchpad.net/ubuntu/+source/kde4libs/+bug/743669>

OSVersionArchitecturePackageVersionFilename
ubuntu9.10noarchkde4libs< 4:4.3.2-0ubuntu7.3UNKNOWN
ubuntu10.04noarchkde4libs< 4:4.4.5-0ubuntu1.1UNKNOWN
ubuntu10.10noarchkde4libs< 4:4.5.1-0ubuntu8.1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	9.10	noarch	kde4libs	< 4:4.3.2-0ubuntu7.3	UNKNOWN
ubuntu	10.04	noarch	kde4libs	< 4:4.4.5-0ubuntu1.1	UNKNOWN
ubuntu	10.10	noarch	kde4libs	< 4:4.5.1-0ubuntu8.1	UNKNOWN