KDE Konqueror ReplaceChild Denial Of Service Vulnerability
BID:18978
CVE-2006-3672 |Info
KDE Konqueror ReplaceChild Denial Of Service Vulnerability
| Bugtraq ID: | 18978 |
| Class: | Failure to Handle Exceptional Conditions |
| CVE: |
CVE-2006-3672 |
| Remote: | Yes |
| Local: | No |
| Published: | Jul 14 2006 12:00AM |
| Updated: | Sep 06 2006 11:18PM |
| Credit: | This issue has been discovered by hdm. |
| Vulnerable: |
Ubuntu Ubuntu Linux 5.10 sparc Ubuntu Ubuntu Linux 5.10 powerpc Ubuntu Ubuntu Linux 5.10 i386 Ubuntu Ubuntu Linux 5.10 amd64 Ubuntu Ubuntu Linux 5.0 4 powerpc Ubuntu Ubuntu Linux 5.0 4 i386 Ubuntu Ubuntu Linux 5.0 4 amd64 Ubuntu Ubuntu Linux 6.06 LTS sparc Ubuntu Ubuntu Linux 6.06 LTS powerpc Ubuntu Ubuntu Linux 6.06 LTS i386 Ubuntu Ubuntu Linux 6.06 LTS amd64 Mandriva Linux Mandrake 2006.0 x86_64 Mandriva Linux Mandrake 2006.0 KDE Konqueror 3.5.1 KDE kdelibs 3.5.2 |
| Not Vulnerable: |
MandrakeSoft Corporate Server 3.0 x86_64 MandrakeSoft Corporate Server 3.0 |
Discussion
KDE Konqueror ReplaceChild Denial Of Service Vulnerability
KDE Konqueror is prone to a denial-of-service vulnerability.
This issue is triggered when an attacker convinces a victim user to visit a malicious website.
Remote attackers may exploit this issue to crash Konqueror, effectively denying service to legitimate users.
KDE Konqueror is prone to a denial-of-service vulnerability.
This issue is triggered when an attacker convinces a victim user to visit a malicious website.
Remote attackers may exploit this issue to crash Konqueror, effectively denying service to legitimate users.
Exploit / POC
KDE Konqueror ReplaceChild Denial Of Service Vulnerability
A specific exploit is not required.
An example proof of concept has been provided:
A specific exploit is not required.
An example proof of concept has been provided:
Solution / Fix
KDE Konqueror ReplaceChild Denial Of Service Vulnerability
Solution:
Currently we are not aware of any official vendor-supplied patches for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected]:[email protected].
Please see the referenced advisories for details on obtaining updates.
KDE kdelibs 3.5.2
Solution:
Currently we are not aware of any official vendor-supplied patches for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected]:[email protected].
Please see the referenced advisories for details on obtaining updates.
KDE kdelibs 3.5.2
-
Ubuntu kdelibs-bin_3.5.2-0ubuntu18.1_amd64.deb
Ubuntu 6.06 LTS:
http://security.ubuntu.com/ubuntu/pool/main/k/kdelibs/kdelibs-bin_3.5. 2-0ubuntu18.1_amd64.deb -
Ubuntu kdelibs-bin_3.5.2-0ubuntu18.1_i386.deb
Ubuntu 6.06 LTS:
http://security.ubuntu.com/ubuntu/pool/main/k/kdelibs/kdelibs-bin_3.5. 2-0ubuntu18.1_i386.deb -
Ubuntu kdelibs-bin_3.5.2-0ubuntu18.1_powerpc.deb
Ubuntu 6.06 LTS:
http://security.ubuntu.com/ubuntu/pool/main/k/kdelibs/kdelibs-bin_3.5. 2-0ubuntu18.1_powerpc.deb -
Ubuntu kdelibs-bin_3.5.2-0ubuntu18.1_sparc.deb
Ubuntu 6.06 LTS:
http://security.ubuntu.com/ubuntu/pool/main/k/kdelibs/kdelibs-bin_3.5. 2-0ubuntu18.1_sparc.deb -
Ubuntu kdelibs-data_3.5.2-0ubuntu18.1_all.deb
Ubuntu 6.06 LTS:
http://security.ubuntu.com/ubuntu/pool/main/k/kdelibs/kdelibs-data_3.5 .2-0ubuntu18.1_all.deb -
Ubuntu kdelibs-dbg_3.5.2-0ubuntu18.1_amd64.deb
Ubuntu 6.06 LTS:
http://security.ubuntu.com/ubuntu/pool/main/k/kdelibs/kdelibs-dbg_3.5. 2-0ubuntu18.1_amd64.deb -
Ubuntu kdelibs-dbg_3.5.2-0ubuntu18.1_i386.deb
Ubuntu 6.06 LTS:
http://security.ubuntu.com/ubuntu/pool/main/k/kdelibs/kdelibs-dbg_3.5. 2-0ubuntu18.1_i386.deb -
Ubuntu kdelibs-dbg_3.5.2-0ubuntu18.1_powerpc.deb
Ubuntu 6.06 LTS:
http://security.ubuntu.com/ubuntu/pool/main/k/kdelibs/kdelibs-dbg_3.5. 2-0ubuntu18.1_powerpc.deb -
Ubuntu kdelibs-dbg_3.5.2-0ubuntu18.1_sparc.deb
Ubuntu 6.06 LTS:
http://security.ubuntu.com/ubuntu/pool/main/k/kdelibs/kdelibs-dbg_3.5. 2-0ubuntu18.1_sparc.deb -
Ubuntu kdelibs_3.5.2-0ubuntu18.1_all.deb
Ubuntu 6.06 LTS:
http://security.ubuntu.com/ubuntu/pool/main/k/kdelibs/kdelibs_3.5.2-0u buntu18.1_all.deb -
Ubuntu kdelibs4-dev_3.5.2-0ubuntu18.1_amd64.deb
Ubuntu 6.06 LTS:
http://security.ubuntu.com/ubuntu/pool/main/k/kdelibs/kdelibs4-dev_3.5 .2-0ubuntu18.1_amd64.deb -
Ubuntu kdelibs4-dev_3.5.2-0ubuntu18.1_i386.deb
Ubuntu 6.06 LTS:
http://security.ubuntu.com/ubuntu/pool/main/k/kdelibs/kdelibs4-dev_3.5 .2-0ubuntu18.1_i386.deb -
Ubuntu kdelibs4-dev_3.5.2-0ubuntu18.1_powerpc.deb
Ubuntu 6.06 LTS:
http://security.ubuntu.com/ubuntu/pool/main/k/kdelibs/kdelibs4-dev_3.5 .2-0ubuntu18.1_powerpc.deb -
Ubuntu kdelibs4-dev_3.5.2-0ubuntu18.1_sparc.deb
Ubuntu 6.06 LTS:
http://security.ubuntu.com/ubuntu/pool/main/k/kdelibs/kdelibs4-dev_3.5 .2-0ubuntu18.1_sparc.deb -
Ubuntu kdelibs4-doc_3.5.2-0ubuntu18.1_all.deb
Ubuntu 6.06 LTS:
http://security.ubuntu.com/ubuntu/pool/main/k/kdelibs/kdelibs4-doc_3.5 .2-0ubuntu18.1_all.deb -
Ubuntu kdelibs4c2a_3.5.2-0ubuntu18.1_amd64.deb
Ubuntu 6.06 LTS:
http://security.ubuntu.com/ubuntu/pool/main/k/kdelibs/kdelibs4c2a_3.5. 2-0ubuntu18.1_amd64.deb -
Ubuntu kdelibs4c2a_3.5.2-0ubuntu18.1_i386.deb
Ubuntu 6.06 LTS:
http://security.ubuntu.com/ubuntu/pool/main/k/kdelibs/kdelibs4c2a_3.5. 2-0ubuntu18.1_i386.deb -
Ubuntu kdelibs4c2a_3.5.2-0ubuntu18.1_powerpc.deb
Ubuntu 6.06 LTS:
http://security.ubuntu.com/ubuntu/pool/main/k/kdelibs/kdelibs4c2a_3.5. 2-0ubuntu18.1_powerpc.deb -
Ubuntu kdelibs4c2a_3.5.2-0ubuntu18.1_sparc.deb
Ubuntu 6.06 LTS:
http://security.ubuntu.com/ubuntu/pool/main/k/kdelibs/kdelibs4c2a_3.5. 2-0ubuntu18.1_sparc.deb
References
KDE Konqueror ReplaceChild Denial Of Service Vulnerability
References:
References:
- Konqueror Homepage (KDE)
- MoBB #14: Konqueror replaceChild() (hdm)