KDE library vulnerabilities

2007-03-2900:00:00

ubuntu.com

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

Confidence

Low

EPSS

0.956

Percentile

99.5%

JSON

Releases

Ubuntu 6.10
Ubuntu 6.06
Ubuntu 5.10

Details

It was discovered that Konqueror did not correctly handle iframes from
JavaScript. If a user were tricked into visiting a malicious website,
Konqueror could crash, resulting in a denial of service. (CVE-2007-1308)

A flaw was discovered in how Konqueror handled PASV FTP responses. If a
user were tricked into visiting a malicious FTP server, a remote
attacker could perform a port-scan of machines within the user’s
network, leading to private information disclosure. (CVE-2007-1564)

OSVersionArchitecturePackageVersionFilename
Ubuntu6.10noarchkdelibs4c2a< 4:3.5.5-0ubuntu3.1.1UNKNOWN
Ubuntu6.06noarchkdelibs4c2a< 4:3.5.2-0ubuntu18.3UNKNOWN
Ubuntu5.10noarchkdelibs4c2< 4:3.4.3-0ubuntu2.3UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Ubuntu	6.10	noarch	kdelibs4c2a	< 4:3.5.5-0ubuntu3.1.1	UNKNOWN
Ubuntu	6.06	noarch	kdelibs4c2a	< 4:3.5.2-0ubuntu18.3	UNKNOWN
Ubuntu	5.10	noarch	kdelibs4c2	< 4:3.4.3-0ubuntu2.3	UNKNOWN