← back
CVE-2006-0019

CVE-2006-0019

EPSS 6.0%
Heap-based buffer overflow in the encodeURI and decodeURI functions in the kjs JavaScript interpreter engine in KDE 3.2.0 through 3.5.0 allows remote attackers to execute arbitrary code via a crafted, UTF-8 encoded URI.
Affected products
n/a · n/a

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
ftp://ftp.kde.org/pub/kde/security_patches/post-3.4.3-kdelibs-kjs.diffhttp://secunia.com/advisories/18500http://secunia.com/advisories/18540http://secunia.com/advisories/18552http://secunia.com/advisories/18559http://secunia.com/advisories/18561http://secunia.com/advisories/18570http://secunia.com/advisories/18583http://secunia.com/advisories/18899http://securityreason.com/securityalert/364http://securitytracker.com/id?1015512https://exchange.xforce.ibmcloud.com/vulnerabilities/24242