[Forgot Password]
Login  Register Subscribe

23631

 
 

115038

 
 

96174

 
 

909

 
 

78077

 
 

109

Paid content will be excluded from the download.


Download | Alert*
OVAL

USN-871-1 -- kdelibs vulnerability

ID: oval:org.secpod.oval:def:700421Date: (C)2011-05-13   (M)2017-10-04
Class: PATCHFamily: unix




A buffer overflow was found in the KDE libraries when converting a string to a floating point number. If a user or application linked against kdelibs were tricked into processing crafted input, an attacker could cause a denial of service or possibly execute arbitrary code with the privileges of the user invoking the program. It was discovered that the KDE libraries could use KHTML to process an unknown MIME type. If a user or application linked against kdelibs were tricked into opening a crafted file, an attacker could potentially trigger XMLHTTPRequests to remote sites.

Platform:
Ubuntu 8.04
Ubuntu 8.10
Ubuntu 9.10
Ubuntu 9.04
Product:
kdelibs
Reference:
USN-871-1
CVE-2009-0689
CVE    1
CVE-2009-0689
CPE    23
cpe:/o:ubuntu:ubuntu_linux:8.04
cpe:/a:mozilla:seamonkey:1.1.8
cpe:/o:openbsd:openbsd:4.5
cpe:/o:freebsd:freebsd:6.4
...

© 2013 SecPod Technologies