Vulnerability in Kde

CVE-2006-0019

Heap-based buffer overflow in the encodeURI and decodeURI functions in the kjs JavaScript interpreter engine in KDE 3.2.0 through 3.5.0 allows remote attackers to execute arbitrary code via a crafted, UTF-8 encoded URI.

EPSS: 0.061 (92.7th percentile) — read the EPSS interpretation.

Affected products

  • Kde — versions 3.2, 3.2.0, 3.2.0_beta1
  • N/a — versions n/a

References