|
||
| Editor Login | Register | ||
| > World > Security |
|
|
| KDE KHTML PNG Processing Buffer Overflow Vulnerability | ||||||||||||||||||||||||||||
A vulnerability has been reported in KDE, which potentially can be exploited by malicious people to compromise a user"s system. The vulnerability is caused due to a boundary error in KHTML when processing PNG files. This can be exploited to cause a heap-based buffer overflow via a specially crafted PNG file included in e.g. a malicious web page. Successful exploitation may allow execution of arbitrary code. The vulnerability is reported in KHTML included in KDE versions 4.0 through 4.0.3. Solution: Apply vendor patch. ftp://ftp.kde.org/pub/kde/security_patches/post-kde-4.0.3-khtml.diff Provided and/or discovered by: Reported by the vendor. Original Advisory: http://www.kde.org/info/security/advisory-20080426-1.txt | ||||||||||||||||||||||||||||
|
| Bağlantılar: bilgininefendisi.net |
| Open Source Document Project | AUP&TOS |
