19 October 2006, 15:01
Qt bug rips security hole in Konqueror
An integer overflow in the Qt library allows an attacker, using, for example, manipulated websites, to infiltrate malicious code via the Konqueror browser and execute this code with the user's privileges. The khtml library from KDE used by Konqueror passes unchecked parameters to Qt. This can be used by a prepared Pixmap image to trigger an overflow and exploit the vulnerability.
The vulnerability was discovered by Georgi Guninski. Red Hat is distributing updated packages which remedy the bug. Updates for other Linux distributions should follow shortly.
- Critical: kdelibs security update, security advisory from Red Hat
(ehe)
Print Version | Send by email
| Permalink: http://h-online.com/-731675
![Kernel Log: Coming in 3.10 (Part 3) [--] Infrastructure](/imgs/43/1/0/4/2/6/7/2/comingin310_4_kicker-4977194bfb0de0d7.png)
![Kernel Log: Coming in 3.10 (Part 3) [--] Infrastructure](/imgs/43/1/0/4/2/3/2/3/comingin310_3_kicker-151cd7b9e9660f05.png)
