konqueror/konq_combo.cc in Konqueror 3.5.7 allows remote attackers to spoof the data: URI scheme in the address bar via a long URI with trailing whitespace, which prevents the beginning of the URI from being displayed.
Max CVSS
2.6
EPSS Score
1.11%
Published
2007-07-17
Updated
2018-10-15
The KDE HTML library (kdelibs), as used by Konqueror 3.5.5, does not properly parse HTML comments, which allows remote attackers to conduct cross-site scripting (XSS) attacks and bypass some XSS protection schemes by embedding certain HTML tags within a comment in a title tag, a related issue to CVE-2007-0478.
Max CVSS
2.6
EPSS Score
3.74%
Published
2007-01-29
Updated
2018-10-16
Kmail 1.9.1 on KDE 3.5.2, with "Prefer HTML to Plain Text" enabled, allows remote attackers to cause a denial of service (crash) via an HTML e-mail with certain table and frameset tags that trigger a segmentation fault, possibly involving invalid free or delete operations.
Max CVSS
2.6
EPSS Score
3.24%
Published
2007-03-07
Updated
2018-10-16
KDE Konqueror 3.5.1 and earlier allows remote attackers to cause a denial of service (application crash) by calling the replaceChild method on a DOM object, which triggers a null dereference, as demonstrated by calling document.replaceChild with a 0 (zero) argument.
Max CVSS
2.6
EPSS Score
6.70%
Published
2006-07-18
Updated
2017-07-20
xpdf and kpdf do not properly validate the "loca" table in PDF files, which allows local users to cause a denial of service (disk consumption and hang) via a PDF file with a "broken" loca table, which causes a large temporary file to be created when xpdf attempts to reconstruct the information.
Max CVSS
2.1
EPSS Score
0.07%
Published
2005-08-16
Updated
2018-10-19
Desktop Communication Protocol (DCOP) daemon, aka dcopserver, in KDE before 3.4 allows local users to cause a denial of service (dcopserver consumption) by "stalling the DCOP authentication process."
Max CVSS
2.1
EPSS Score
0.06%
Published
2005-05-02
Updated
2018-10-19
The dcopidlng script in KDE 3.2.x and 3.3.x creates temporary files with predictable filenames, which allows local users to overwrite arbitrary files via a symlink attack.
Max CVSS
2.1
EPSS Score
0.04%
Published
2005-05-02
Updated
2017-10-11
KDE 3.2.x and 3.3.0 through 3.3.2, when saving credentials that are (1) manually entered by the user or (2) created by the SMB protocol handler, stores those credentials for plaintext in the user's .desktop file, which may be created with world-readable permissions, which could allow local users to obtain usernames and passwords for remote resources such as SMB shares.
Max CVSS
2.1
EPSS Score
0.09%
Published
2005-01-10
Updated
2017-07-11
The libmediatool library used for the KDE mediatool allows local users to create arbitrary files via a symlink attack.
Max CVSS
1.2
EPSS Score
0.04%
Published
1999-03-01
Updated
2008-09-10
Screen savers in KDE beta 3 allows local users to overwrite arbitrary files via a symlink attack on the .kss.pid file.
Max CVSS
2.1
EPSS Score
0.04%
Published
1998-02-06
Updated
2017-12-19
KDE kppp allows local users to create a directory in an arbitrary location via the HOME environmental variable.
Max CVSS
2.1
EPSS Score
0.04%
Published
1998-11-18
Updated
2016-10-18
11 vulnerabilities found
This web site uses cookies for managing your session, storing preferences, website analytics and additional purposes described in our privacy policy.
By using this web site you are agreeing to CVEdetails.com terms of use!