Red Hat Security AdvisoryRHSA-2007:0909
kdelibs security update
Released 2007-10-08 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux (v. 5 server) kdelibs-6:3.5.4-13.el5, kdelibs-6:3.5.4-13.el5.i386, kdelibs-6:3.5.4-13.el5.ia64 +9
- Red Hat Enterprise Linux AS version 4 kdelibs-6:3.3.1-9.el4, kdelibs-6:3.3.1-9.el4.i386, kdelibs-6:3.3.1-9.el4.ia64 +5
- Red Hat Enterprise Linux Desktop (v. 5 client) kdelibs-6:3.5.4-13.el5, kdelibs-6:3.5.4-13.el5.i386, kdelibs-apidocs-6:3.5.4-13.el5 +1
- Red Hat Enterprise Linux Desktop Workstation (v. 5 client) kdelibs-6:3.5.4-13.el5, kdelibs-devel-6:3.5.4-13.el5, kdelibs-devel-6:3.5.4-13.el5.i386
- Red Hat Enterprise Linux Desktop version 4 kdelibs-6:3.3.1-9.el4, kdelibs-6:3.3.1-9.el4.i386, kdelibs-devel-6:3.3.1-9.el4 +1
- Red Hat Enterprise Linux ES version 4 kdelibs-6:3.3.1-9.el4, kdelibs-6:3.3.1-9.el4.i386, kdelibs-6:3.3.1-9.el4.ia64 +3
- Red Hat Enterprise Linux WS version 4 kdelibs-6:3.3.1-9.el4, kdelibs-6:3.3.1-9.el4.i386, kdelibs-6:3.3.1-9.el4.ia64 +3
Fixes 6 records
Priority LOW 37
The FTP protocol implementation in Konqueror 3.5.5 allows remote servers to force the client to connect to other servers, perform a proxied port scan, or obtain sensitive information by specifying an alternate server add…
CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.03898 · Published 2007-03-21 · Fixed CWE-200
Priority LOW 31
ecma/kjs_html.cpp in KDE JavaScript (KJS), as used in Konqueror in KDE 3.5.5, allows remote attackers to cause a denial of service (crash) by accessing the content of an iframe with an ftp:// URI in the src attribute, pr…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.08441 · Published 2007-03-07 · Fixed CWE-399
Priority LOW 24
KDE Konqueror 3.5.7 allows remote attackers to spoof the URL address bar by calling setInterval with a small interval and changing the window.location property.
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.01831 · Published 2007-08-08 · Fixed CWE-59
Priority LOW 24
The UTF-8 decoder in codecs/qutfcodec.cpp in Qt 3.3.8 and 4.2.3 does not reject long UTF-8 sequences as required by the standard, which allows remote attackers to conduct cross-site scripting (XSS) and directory traversa…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.0212 · Published 2007-04-03 · Fixed
Priority LOW 18
konqueror/konq_combo.cc in Konqueror 3.5.7 allows remote attackers to spoof the data: URI scheme in the address bar via a long URI with trailing whitespace, which prevents the beginning of the URI from being displayed.
CVSS 2.0LOW 2.6· Network · No auth · Interaction — · EPSS 0.02562 · Published 2007-07-17 · Fixed
Priority LOW 17
The KDE HTML library (kdelibs), as used by Konqueror 3.5.5, does not properly parse HTML comments, which allows remote attackers to conduct cross-site scripting (XSS) attacks and bypass some XSS protection schemes by emb…
CVSS 2.0LOW 2.6· Network · No auth · Interaction — · EPSS 0.01903 · Published 2007-01-29 · Fixed CWE-79
THREATIST.IORead the docs