First Last Prev Next    No search results available      Search page      Enter new bug
Bug#: 173303
Alias:
Product:
Component:
Status: RESOLVED
Resolution: DUPLICATE of bug 172746
Assigned To: Gentoo Security <security@gentoo.org>
Hardware:
OS:
Version:
Priority:
Severity:
Reporter: Sune Kloppenborg Jeppesen <jaervosz@gentoo.org>
Add CC:
CC:
Remove selected CCs
URL:
Summary:
Status Whiteboard:
Keywords:
Flags: Requestee:
 
 
  ()

Filename Description Type Creator Created Size Actions
Create a New Attachment (proposed patch, testcase, etc.) View All

Bug 173303 depends on: Show dependency tree
Bug 173303 blocks:

Additional Comments: (this is where you put emerge --info)


Not eligible to see or edit group visibility for this bug.






View Bug Activity   |   Format For Printing   |   XML   |   Clone This Bug

Description:   Opened: 2007-04-04 06:33 0000 
Mandriva Linux Security Advisory MDKSA-2007:076 
  http://www.mandriva.com/security/ 
  _______________________________________________________________________ 

  Package : kdelibs 
  Date : April 3, 2007 
  Affected: 2007.0, Corporate 3.0, Corporate 4.0 
  _______________________________________________________________________ 

  Problem Description: 

  A bug was discovered in KJS where UTF8 decoding did not reject 
  overlong sequences. This vulnerability is similar to that discovered 
  by Andreas Nolden in QT3 and QT4, but at this current time there is 
  no known exploit for this issue. 

  Updated packages have been patched to address this issue. 
  _______________________________________________________________________ 

 References: 

  http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-0242

------- Comment #1 From Sune Kloppenborg Jeppesen 2007-04-04 06:34:00 0000 ------- 
KDE please advise.

------- Comment #2 From Sune Kloppenborg Jeppesen 2007-04-04 06:41:33 0000 ------- 
Woops we already have a bug for this one.

*** This bug has been marked as a duplicate of bug 172746 ***
First Last Prev Next    No search results available      Search page      Enter new bug