CVE-2006-0019

Published: Jan 20, 2006Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

Heap-based buffer overflow in the encodeURI and decodeURI functions in the kjs JavaScript interpreter engine in KDE 3.2.0 through 3.5.0 allows remote attackers to execute arbitrary code via a crafted, UTF-8 encoded URI.

Affected (17)

Products: Kde: Kde

Kde

1 product

Kde

Configuration A

17 vulnerable

Vulnerable Software	Affected Versions
Kde Kde	Version 3.2.0
Kde Kde	Version 3.2.0_beta1
Kde Kde	Version 3.2.1
Kde Kde	Version 3.2.2
Kde Kde	Version 3.2.3
Kde Kde	Version 3.2.x
Kde Kde	Version 3.2
Kde Kde	Version 3.3.0
Kde Kde	Version 3.3.1
Kde Kde	Version 3.3.2
Kde Kde	Version 3.3.x
Kde Kde	Version 3.3
Kde Kde	Version 3.4.0
Kde Kde	Version 3.4.1
Kde Kde	Version 3.4.2
Kde Kde	Version 3.4
Kde Kde	Version 3.5.0

References (52)

ftp://ftp.kde.org/pub/kde/security_patches/post-3.4.3-kdelibs-kjs.diff (unsafe URL)

Source: secalert@redhat.com

Patch

http://secunia.com/advisories/18500

Source: secalert@redhat.com

PatchVendor Advisory

http://secunia.com/advisories/18540

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/18552

Source: secalert@redhat.com

http://secunia.com/advisories/18559

Source: secalert@redhat.com

http://secunia.com/advisories/18561

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/18570

Source: secalert@redhat.com

http://secunia.com/advisories/18583

Source: secalert@redhat.com

http://secunia.com/advisories/18899

Source: secalert@redhat.com

http://securityreason.com/securityalert/364

Source: secalert@redhat.com

http://securitytracker.com/id?1015512

Source: secalert@redhat.com

http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.361107

Source: secalert@redhat.com

http://www.debian.org/security/2006/dsa-948

Source: secalert@redhat.com

Vendor Advisory

http://www.gentoo.org/security/en/glsa/glsa-200601-11.xml

Source: secalert@redhat.com

http://www.kde.org/info/security/advisory-20060119-1.txt

Source: secalert@redhat.com

PatchVendor Advisory

http://www.mandriva.com/security/advisories?name=MDKSA-2006:019

Source: secalert@redhat.com

http://www.osvdb.org/22659

Source: secalert@redhat.com

http://www.redhat.com/support/errata/RHSA-2006-0184.html

Source: secalert@redhat.com

Vendor Advisory

http://www.securityfocus.com/archive/1/422464/100/0/threaded

Source: secalert@redhat.com

http://www.securityfocus.com/archive/1/422489/100/0/threaded

Source: secalert@redhat.com

http://www.securityfocus.com/archive/1/427976/100/0/threaded

Source: secalert@redhat.com

http://www.securityfocus.com/bid/16325

Source: secalert@redhat.com

http://www.ubuntu.com/usn/usn-245-1

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2006/0265

Source: secalert@redhat.com

https://exchange.xforce.ibmcloud.com/vulnerabilities/24242

Source: secalert@redhat.com

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11858

Source: secalert@redhat.com

ftp://ftp.kde.org/pub/kde/security_patches/post-3.4.3-kdelibs-kjs.diff (unsafe URL)