CVE-2007-1308
Fixed in a distro release EPSS 8%
ecma/kjs_html.cpp in KDE JavaScript (KJS), as used in Konqueror in KDE 3.5.5, allows remote attackers to cause a denial of service (crash) by accessing the content of an iframe with an ftp:// URI in the src attribute, probably due to a NULL pointer dereference.
Products: kde konqueror
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Red Hat Enterprise Linux 4 | kdelibs | 6:3.3.1-9.el4 |
| Red Hat Enterprise Linux 4 | kdelibs-debuginfo | 6:3.3.1-9.el4 |
| Red Hat Enterprise Linux 4 | kdelibs-devel | 6:3.3.1-9.el4 |
| Red Hat Enterprise Linux 5 | kdelibs | 6:3.5.4-13.el5 |
| Red Hat Enterprise Linux 5 | kdelibs-apidocs | 6:3.5.4-13.el5 |
| Red Hat Enterprise Linux 5 | kdelibs-debuginfo | 6:3.5.4-13.el5 |
| Red Hat Enterprise Linux 5 | kdelibs-devel | 6:3.5.4-13.el5 |