Paketname
kdelibs
Datum
2006-07-20
Advisory ID
MDKSA-2006:130
Betroffene Versionen
2006.0 i586 , 2006.0 x86_64

Problembeschreibung

KDE Konqueror 3.5.1 and earlier allows remote attackers to cause a denial
of service (application crash) by calling the replaceChild method on a
DOM object, which triggers a null dereference, as demonstrated by calling
document.replaceChild with a 0 (zero) argument.

This issue does not affect Corporate 3.0.

Updated packages have been patched to correct this issue.

Aktualisierte Pakete

2006.0 i586

 9c08048d1eae88a7b1969464d026383d  2006.0/RPMS/kdelibs-common-3.4.2-31.4.20060mdk.i586.rpm
 03181cb4ee659c54cde567e36bb8d0ee  2006.0/RPMS/kdelibs-devel-doc-3.4.2-31.4.20060mdk.i586.rpm
 5a1e16d3e441004c80ced1a4537fa9a5  2006.0/RPMS/libkdecore4-3.4.2-31.4.20060mdk.i586.rpm
 2dfd44b73866f4a8551f9368553a1d44  2006.0/RPMS/libkdecore4-devel-3.4.2-31.4.20060mdk.i586.rpm
 76afd9e941b89499e0e3b4bf2045ffad  2006.0/SRPMS/kdelibs-3.4.2-31.4.20060mdk.src.rpm

2006.0 x86_64

 5de19da9121964246ee06c9eab9ece91  x86_64/2006.0/RPMS/kdelibs-common-3.4.2-31.4.20060mdk.x86_64.rpm
 392daaeb1744ea56dfd6005c0ee1500a  x86_64/2006.0/RPMS/kdelibs-devel-doc-3.4.2-31.4.20060mdk.x86_64.rpm
 4a2b6d8f83f9d5d00b2272334ddf6f24  x86_64/2006.0/RPMS/lib64kdecore4-3.4.2-31.4.20060mdk.x86_64.rpm
 137d119a30a44a9abc4d221354883599  x86_64/2006.0/RPMS/lib64kdecore4-devel-3.4.2-31.4.20060mdk.x86_64.rpm
 5a1e16d3e441004c80ced1a4537fa9a5  x86_64/2006.0/RPMS/libkdecore4-3.4.2-31.4.20060mdk.i586.rpm
 2dfd44b73866f4a8551f9368553a1d44  x86_64/2006.0/RPMS/libkdecore4-devel-3.4.2-31.4.20060mdk.i586.rpm
 76afd9e941b89499e0e3b4bf2045ffad  x86_64/2006.0/SRPMS/kdelibs-3.4.2-31.4.20060mdk.src.rpm

Referenzen