AplusWebMaster
Topic Starter
FYI…
- http://isc.sans.org/diary.php?storyid=1061
Last Updated: 2006-01-21 20:07:13 UTC
"There is a vulnerability in KDE kjs JavaScript interpreter engine which can be exploited to cause a DoS or arbitrary code to be executed on a vulnerable system. The JavaScript interpreter engine used by Konqueror and other parts of KDE contain a heap overflow which can be triggered when decoding specially crafted UTF-8 encoded URI sequences. Vulnerable system can be compromised by malicious javascript code (e.g. on a malicious website) using affected JavaScript interpreter engine."
Details can be found at:"
- http://secunia.com/advisories/18500/
"Release Date: 2006-01-20
Critical: Highly critical
Impact: DoS, System access
Where: From remote
Solution Status: Vendor Patch…"
- http://www.kde.org/info/security/advisory-20060119-1.txt
"…Systems affected: KDE 3.2.0 up to including KDE 3.5.0 …
Patch for KDE 3.4.0 - 3.5.0 is available from ftp://ftp.kde.org/pub/kde/security_patches :
ecc0ec13ce3b06e94e35aa8e937e02bf post-3.4.3-kdelibs-kjs.diff
Patch for KDE 3.2.0 - 3.3.2 is available from ftp://ftp.kde.org/pub/kde/security_patches :
9bca9b44ca2d84e3b2f85ffb5d30e047 post-3.2.3-kdelibs-kjs.diff …"
- http://isc.sans.org/diary.php?storyid=1061
Last Updated: 2006-01-21 20:07:13 UTC
"There is a vulnerability in KDE kjs JavaScript interpreter engine which can be exploited to cause a DoS or arbitrary code to be executed on a vulnerable system. The JavaScript interpreter engine used by Konqueror and other parts of KDE contain a heap overflow which can be triggered when decoding specially crafted UTF-8 encoded URI sequences. Vulnerable system can be compromised by malicious javascript code (e.g. on a malicious website) using affected JavaScript interpreter engine."
Details can be found at:"
- http://secunia.com/advisories/18500/
"Release Date: 2006-01-20
Critical: Highly critical
Impact: DoS, System access
Where: From remote
Solution Status: Vendor Patch…"
- http://www.kde.org/info/security/advisory-20060119-1.txt
"…Systems affected: KDE 3.2.0 up to including KDE 3.5.0 …
Patch for KDE 3.4.0 - 3.5.0 is available from ftp://ftp.kde.org/pub/kde/security_patches :
ecc0ec13ce3b06e94e35aa8e937e02bf post-3.4.3-kdelibs-kjs.diff
Patch for KDE 3.2.0 - 3.3.2 is available from ftp://ftp.kde.org/pub/kde/security_patches :
9bca9b44ca2d84e3b2f85ffb5d30e047 post-3.2.3-kdelibs-kjs.diff …"