Red Hat Security AdvisoryRHSA-2006:0184
kdelibs security update
Released 2006-01-19 · Red Hat rating Critical · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AS version 4 kdelibs-6:3.3.1-3.14, kdelibs-6:3.3.1-3.14.i386, kdelibs-6:3.3.1-3.14.ia64 +5
- Red Hat Enterprise Linux Desktop version 4 kdelibs-6:3.3.1-3.14, kdelibs-6:3.3.1-3.14.i386, kdelibs-devel-6:3.3.1-3.14 +1
- Red Hat Enterprise Linux ES version 4 kdelibs-6:3.3.1-3.14, kdelibs-6:3.3.1-3.14.i386, kdelibs-6:3.3.1-3.14.ia64 +3
- Red Hat Enterprise Linux WS version 4 kdelibs-6:3.3.1-3.14, kdelibs-6:3.3.1-3.14.i386, kdelibs-6:3.3.1-3.14.ia64 +3
Fixes 1 record
Priority MEDIUM 42
Heap-based buffer overflow in the encodeURI and decodeURI functions in the kjs JavaScript interpreter engine in KDE 3.2.0 through 3.5.0 allows remote attackers to execute arbitrary code via a crafted, UTF-8 encoded URI.
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.0614 · Published 2006-01-20 · Fixed
