On last.fm: Taylor Swift photos and free music!
BNET Business Network:
BNET
TechRepublic
ZDNet
74 TalkBacks

By Joris Evers
Posted on ZDNet News: Jan 20, 2006 7:44:00 PM

A serious vulnerability has been found in the popular KDE open-source software bundle. The flaw, deemed "critical" by the research outfit the French Security Incident Response Team, could allow a remote attacker to gain control over vulnerable systems. KDE is a desktop software package for Linux and Unix systems and includes the Konqueror Web browser and other applications.

The vulnerability lies in the JavaScript interpreter engine used by Konqueror and other parts of KDE, according to a security advisory posted Thursday. An attacker could craft a special UTF-8 encoded URI sequence to exploit the flaw, according to the advisory. For an attack to be successful, a person would have to visit the attacker's Web page using Konqueror, the FrSIRT said in its alert. Affected are KDE 3.2.0 up to and including KDE 3.5.0. Fixes are available.

SponsoredWhite Papers, Webcasts, and Downloads

  • Talkback
  • Most Recent of 74 Talkback(s)
Re: KDE flaw
Newsflash: That so-called "proactive security"
isn't NEEDED in Linux.

I've been using Linux as my primary OS for about
four years now, and in that time, I've never seen
a nee... (Read the rest)
Posted by: Mori_Sakura Posted on: 02/04/06 You are currently: a Guest | | Terms of Use
Go figure ........  I_am_hellion_z | 01/20/06
non issue  linuxoverwindows | 01/21/06
Oops safari  jimk_z | 01/22/06
KDE flaws put Linux, Unix systems at risk  Loverock Davidson | 01/20/06
Well...  bill@... | 01/20/06
Well  Loverock Davidson | 01/20/06
nope, wrong again  linuxoverwindows | 01/21/06
Looks like i'm right... again  Loverock Davidson | 01/21/06
just because...  linuxoverwindows | 01/21/06
No your just warped around your own gravitational field  whieber | 01/21/06
Get the facts straight.  mpoppe | 01/23/06
Fewl  currie | 01/21/06
Yes  Loverock Davidson | 01/21/06
No  SC-man | 01/23/06
You're such a f'n idiot.  Henaway | 01/24/06
Isn't KDE for LINUX ?! ...... And Really Popular?!  I_am_hellion_z | 01/20/06
Except, KDE is NOT just a Linux Program  xrxca | 01/20/06
But, unlike Windows, it is not on ALL systems, and can be removed.  DonnieBoy | 01/21/06
Oh Noooooooo !!!  osreinstall | 01/21/06
easier than that, let me break it down  linuxoverwindows | 01/21/06
You don't have to. I already know.  osreinstall | 01/21/06
Common mistake for the newbie like osreinstall  Richard Flude | 01/21/06
yeah, heres an example.  linuxoverwindows | 01/21/06
Cannot handle a little fun. Oh come'on we hear it from you all the time.  osreinstall | 01/21/06
re: can not handle a little fun.  linuxoverwindows | 01/21/06
Satire is the best.  osreinstall | 01/22/06
the flaw is if you use konq and ked and java.  linuxoverwindows | 01/21/06
*kde  linuxoverwindows | 01/21/06
Correction . . .  koelsh | 01/21/06
Desktop?  currie | 01/21/06
or elinks  linuxoverwindows | 01/21/06
U R A phu King ID10T!  whieber | 01/20/06
OMG  Loverock Davidson | 01/21/06
Nothing personal, just seemed funny at the time.  whieber | 01/21/06
our boy clippy  linuxoverwindows | 01/21/06
Linux is well on its way  node357 | 01/23/06
You keep thinking that  Loverock Davidson | 01/23/06
Name Calling?  currie | 01/21/06
why resort to it...  linuxoverwindows | 01/21/06
burning reck  currie | 01/21/06
dont get me wrong...  linuxoverwindows | 01/21/06
Dream On  bigpicture | 01/20/06
Really guys, why do you keep...  thetargos | 01/21/06
They keep answering  Loverock Davidson | 01/21/06
see what i mean?  linuxoverwindows | 01/21/06
Or perhaps...  Mori_Sakura | 02/04/06
No need to  Loverock Davidson | 01/21/06
Enjoy a little sarcasm...  whieber | 01/21/06
The Patch has been out almost as long as this story  Jwheat | 01/23/06
Wow, I'm shocked ...  worknman | 01/20/06
Am not  currie | 01/21/06
Sorry, I'll take a buffer overflow on Linux over Windows any day...  webaugur | 01/20/06
Ahhh.....diversion at it's finest.  IT Scion | 01/22/06
DEP and Windows  Umbar | 01/23/06
I quit Linux because of KDE!!  joelle-bryan | 01/20/06
Each to their own  currie | 01/21/06
Think about your utility  endrix | 01/23/06
Right...  horusfalcon | 01/23/06
The important thing to notice is that there is no mono-culture.  DonnieBoy | 01/20/06
Percentages  duane.wills@... | 01/20/06
KDE flaw  raybdavisjr | 01/21/06
lol  linuxoverwindows | 01/21/06
erm..  currie | 01/21/06
What are you talking about dude?  whieber | 01/21/06
neh?  linuxoverwindows | 01/21/06
Re: KDE flaw  Mori_Sakura | 02/04/06
Importantly, is that it gets reported and it get's fixed  Boot_Agnostic | 01/21/06
hear hear  linuxoverwindows | 01/21/06
This is how a flaw ought to be handled.  Yen_z | 01/23/06
Back to subject...  Mitch 74 | 01/23/06
Errr....  Yen_z | 01/23/06
Impossible in OSS ... "Many Eyes" Watching Code???  PMC-CON | 01/23/06
Joe Sixpack is Driven  s_gamgee | 01/24/06
Nice systems  Boot_Agnostic | 01/26/06

What do you think?

advertisement
Click Here
advertisement

White Papers, Webcasts, and Downloads