NVD

Id
58763  
Name
CVE-2006-0019  
Description
Heap-based buffer overflow in the encodeURI and decodeURI functions in the kjs JavaScript interpreter engine in KDE 3.2.0 through 3.5.0 allows remote attackers to execute arbitrary code via a crafted, UTF-8 encoded URI.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2016-12-20  
Published
2006-01-20  
Modified Date
2011-03-07  
Seq
2006-0019  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
301547 58763 CVE-2006-0019 ftp://ftp.kde.org/pub/kde/security_patches/post-3.4.3-kdelibs-kjs.diff  View
301548 58763 CVE-2006-0019 oval:org.mitre.oval:def:11858  View
301549 58763 CVE-2006-0019 364  View
301550 58763 CVE-2006-0019 1015512  View
301551 58763 CVE-2006-0019 SSA:2006-045-05  View
301552 58763 CVE-2006-0019 DSA-948  View
301553 58763 CVE-2006-0019 GLSA-200601-11  View
301554 58763 CVE-2006-0019 http://www.kde.org/info/security/advisory-20060119-1.txt  View
301555 58763 CVE-2006-0019 MDKSA-2006:019  View
301556 58763 CVE-2006-0019 RHSA-2006:0184  View
301557 58763 CVE-2006-0019 20060119 [KDE Security Advisory] kjs encodeuri/decodeuri heap overflow  View
301558 58763 CVE-2006-0019 SUSE-SA:2006:003  View
301559 58763 CVE-2006-0019 FLSA:178606  View
301560 58763 CVE-2006-0019 16325  View
301561 58763 CVE-2006-0019 USN-245-1  View
301562 58763 CVE-2006-0019 ADV-2006-0265  View
301563 58763 CVE-2006-0019 kde-kjs-bo(24242)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
62265 JVNDB-2005-000467 KED の kdelibs におけるヒープオーバーフローの脆弱性 KDE に同梱されている kdelibs には、KJS に対する境界チェックが不適切であるため、UTF-8 でエンコードされた特定の URI 配列をデコードする際にヒープオーバーフローが発生する脆弱性が存在します。 CVE-2006-0019 16121 CVE-2006-0019 58763 7.5 http://jvndb.jvn.jp/ja/contents/2005/JVNDB-2005-000467.html 2005-08-04 2007-04-01 View