You are here: silicon.com > Software > Security Strategy

Security Strategy

Open source bundle has "critical" hole

Konqueror and more affected, says FrSIRT

Tags: konqueror, kde, frsirt, flaw

By Joris Evers

Published: 23 January 2006 09:08 GMT

A serious vulnerability has been found in the popular KDE open source software bundle.

The flaw, deemed "critical" by the research outfit the French Security Incident Response Team (FrSIRT), could allow a remote attacker to gain control over vulnerable systems.

KDE is a desktop software package for Linux and Unix systems and includes the Konqueror web browser and other applications.

The vulnerability lies in the JavaScript interpreter engine used by Konqueror and other parts of KDE, according to a security advisory posted on Thursday.

An attacker could craft a special UTF-8 encoded URI sequence to exploit the flaw, according to the advisory. For an attack to be successful, a person would have to visit the attacker's web page using Konqueror, the FrSIRT said in its alert. KDE 3.2.0 up to and including KDE 3.5.0 are affected. Fixes are available.

Joris Evers writes for CNET News.com

  1. Zones
  2. Management
  3. Networks
  4. Software
  5. IT Services
  6. Hardware
  1. Verticals
  2. Public Sector
  3. Financial Services
  4. Retail & Leisure

  • Jobs
Linux Systems Engineer / Leading Client

XEN, Vmware Virtualization Management of PF Sense Firewalls with Failover Setups Clustered File Systems (GFS,LVM) Puppet, CF Engine System Management ...

Linux Support Engineer

Working closely with NMC and Customer Support Teams in providing day to day support to customer escalations and problem solving on the incident ...

Systems Administrators / London / Linux / Unix / Admin

Linux / Unix System Admin - London - Unix / Linux systems Administrators are required to work in a niche and rapidly expanding software house base in ...

Agenda Setters 2009
Welcome to the ninth annual Agenda Setters poll – silicon.com's list of the top 50 most influential individuals in the technology and IT industries, from techies and CIOs to entrepreneurs and business leaders. Find out more in our latest special report.





Quick Sitemap Links: