KDE 3.2.1

rendering/render_replaced.cpp in Konqueror in KDE before 4.9.3 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted web page, related to "trying to reuse a frame with a null part."

Published: 2012-11-11T11:00:00.000Z
Updated: 2024-08-06T20:35:09.931Z

The Adobe PDF specification 1.3, as implemented by (a) xpdf 3.0.1 patch 2, (b) kpdf in KDE before 3.5.5, (c) poppler before 0.5.4, and other products, allows remote attackers to have an unknown impact, possibly including denial of service (infinite loop), arbitrary code execution, or memory corruption, via a PDF file with a (1) crafted catalog dictionary or (2) a crafted Pages attribute that references an invalid page tree node.

Published: 2007-01-09T00:00:00.000Z
Updated: 2024-08-07T12:03:37.070Z

KDE Display Manager (KDM) in KDE 3.2.0 up to 3.5.3 allows local users to read arbitrary files via a symlink attack related to the session type for login.

Published: 2006-06-15T10:00:00.000Z
Updated: 2024-08-07T17:51:04.699Z

Heap-based buffer overflow in the encodeURI and decodeURI functions in the kjs JavaScript interpreter engine in KDE 3.2.0 through 3.5.0 allows remote attackers to execute arbitrary code via a crafted, UTF-8 encoded URI.

Published: 2006-01-20T21:00:00.000Z
Updated: 2024-08-07T16:18:20.752Z

kcheckpass in KDE 3.2.0 up to 3.4.2 allows local users to gain root access via a symlink attack on lock files.

Published: 2005-09-06T04:00:00.000Z
Updated: 2024-08-07T22:30:00.960Z