• info
• discussion
• exploit
• solution
• references

KDE KJS Encodeuri / Decodeuri Remote Heap Overflow Vulnerability

Solution:
Please see the referenced advisories for more information and fixes.


KDE KDE 3.2

• KDE post-3.2.3-kdelibs-kjs.diff
  ftp://ftp.kde.org/pub/kde/security_patches/post-3.2.3-kdelibs-kjs.diff

KDE KDE 3.2.1

• KDE post-3.2.3-kdelibs-kjs.diff
  ftp://ftp.kde.org/pub/kde/security_patches/post-3.2.3-kdelibs-kjs.diff

KDE KDE 3.2.2

• KDE post-3.2.3-kdelibs-kjs.diff
  ftp://ftp.kde.org/pub/kde/security_patches/post-3.2.3-kdelibs-kjs.diff

KDE KDE 3.2.3

• KDE post-3.2.3-kdelibs-kjs.diff
  ftp://ftp.kde.org/pub/kde/security_patches/post-3.2.3-kdelibs-kjs.diff


• Slackware kdelibs-3.2.3-i486-3.tgz
  Slackware 10.0:
  ftp://ftp.slackware.com/pub/slackware/slackware-10.0/patches/packages/ kdelibs-3.2.3-i486-3.tgz

KDE KDE 3.3

• KDE post-3.2.3-kdelibs-kjs.diff
  ftp://ftp.kde.org/pub/kde/security_patches/post-3.2.3-kdelibs-kjs.diff

KDE KDE 3.3.1

• KDE post-3.2.3-kdelibs-kjs.diff
  ftp://ftp.kde.org/pub/kde/security_patches/post-3.2.3-kdelibs-kjs.diff

KDE KDE 3.3.2

• Slackware kdelibs-3.3.2-i486-3.tgz
  Slackware 10.1:
  ftp://ftp.slackware.com/pub/slackware/slackware-10.1/patches/packages/ kdelibs-3.3.2-i486-3.tgz


• Slackware kdelibs-3.4.2-i486-2.tgz
  Slackware 10.2:
  ftp://ftp.slackware.com/pub/slackware/slackware-10.2/patches/packages/ kdelibs-3.4.2-i486-2.tgz

KDE KDE 3.3.2

• KDE post-3.2.3-kdelibs-kjs.diff
  ftp://ftp.kde.org/pub/kde/security_patches/post-3.2.3-kdelibs-kjs.diff

KDE kdelibs 3.4

• SuSE kdelibs3-3.4.0-20.10.i586.rpm
  SUSE LINUX 9.3:
  ftp://ftp.suse.com/pub/suse/i386/update/9.3/rpm/i586/kdelibs3-3.4.0-20 .10.i586.rpm


• SuSE kdelibs3-3.4.0-20.10.x86_64.rpm
  SUSE LINUX 9.3:
  ftp://ftp.suse.com/pub/suse/i386/update/9.3/rpm/x86_64/kdelibs3-3.4.0- 20.10.x86_64.rpm


• SuSE kdelibs3-32bit-9.3-7.4.x86_64.rpm
  SUSE LINUX 9.3:
  ftp://ftp.suse.com/pub/suse/i386/update/9.3/rpm/x86_64/kdelibs3-32bit- 9.3-7.4.x86_64.rpm


• SuSE kdelibs3-devel-3.4.0-20.10.i586.rpm
  SUSE LINUX 9.3:
  ftp://ftp.suse.com/pub/suse/i386/update/9.3/rpm/i586/kdelibs3-devel-3. 4.0-20.10.i586.rpm


• SuSE kdelibs3-devel-3.4.0-20.10.x86_64.rpm
  SUSE LINUX 9.3:
  ftp://ftp.suse.com/pub/suse/i386/update/9.3/rpm/x86_64/kdelibs3-devel- 3.4.0-20.10.x86_64.rpm


• Ubuntu kdelibs-bin_3.4.0-0ubuntu3.5_amd64.deb
  Ubuntu 5.04:
  http://security.ubuntu.com/ubuntu/pool/main/k/kdelibs/kdelibs-bin_3.4. 0-0ubuntu3.5_amd64.deb


• Ubuntu kdelibs-bin_3.4.0-0ubuntu3.5_i386.deb
  Ubuntu 5.04:
  http://security.ubuntu.com/ubuntu/pool/main/k/kdelibs/kdelibs-bin_3.4. 0-0ubuntu3.5_i386.deb


• Ubuntu kdelibs-bin_3.4.0-0ubuntu3.5_powerpc.deb
  Ubuntu 5.04:
  http://security.ubuntu.com/ubuntu/pool/main/k/kdelibs/kdelibs-bin_3.4. 0-0ubuntu3.5_powerpc.deb


• Ubuntu kdelibs-data_3.4.0-0ubuntu3.5_all.deb
  Ubuntu 5.04:
  http://security.ubuntu.com/ubuntu/pool/main/k/kdelibs/kdelibs-data_3.4 .0-0ubuntu3.5_all.deb


• Ubuntu kdelibs-data_3.4.3-0ubuntu2_all.deb
  Ubuntu 5.10:
  http://security.ubuntu.com/ubuntu/pool/main/k/kdelibs/kdelibs-data_3.4 .3-0ubuntu2_all.deb


• Ubuntu kdelibs_3.4.0-0ubuntu3.5_all.deb
  Ubuntu 5.04:
  http://security.ubuntu.com/ubuntu/pool/main/k/kdelibs/kdelibs_3.4.0-0u buntu3.5_all.deb


• Ubuntu kdelibs4-dev_3.4.0-0ubuntu3.5_amd64.deb
  Ubuntu 5.04:
  http://security.ubuntu.com/ubuntu/pool/main/k/kdelibs/kdelibs4-dev_3.4 .0-0ubuntu3.5_amd64.deb


• Ubuntu kdelibs4-dev_3.4.0-0ubuntu3.5_i386.deb
  Ubuntu 5.04:
  http://security.ubuntu.com/ubuntu/pool/main/k/kdelibs/kdelibs4-dev_3.4 .0-0ubuntu3.5_i386.deb


• Ubuntu kdelibs4-dev_3.4.0-0ubuntu3.5_powerpc.deb
  Ubuntu 5.04:
  http://security.ubuntu.com/ubuntu/pool/main/k/kdelibs/kdelibs4-dev_3.4 .0-0ubuntu3.5_powerpc.deb


• Ubuntu kdelibs4-doc_3.4.0-0ubuntu3.5_all.deb
  Ubuntu 5.04:
  http://security.ubuntu.com/ubuntu/pool/main/k/kdelibs/kdelibs4-doc_3.4 .0-0ubuntu3.5_all.deb


• Ubuntu kdelibs4_3.4.0-0ubuntu3.5_amd64.deb
  Ubuntu 5.04:
  http://security.ubuntu.com/ubuntu/pool/main/k/kdelibs/kdelibs4_3.4.0-0 ubuntu3.5_amd64.deb


• Ubuntu kdelibs4_3.4.0-0ubuntu3.5_i386.deb
  Ubuntu 5.04:
  http://security.ubuntu.com/ubuntu/pool/main/k/kdelibs/kdelibs4_3.4.0-0 ubuntu3.5_i386.deb


• Ubuntu kdelibs4_3.4.0-0ubuntu3.5_powerpc.deb
  Ubuntu 5.04:
  http://security.ubuntu.com/ubuntu/pool/main/k/kdelibs/kdelibs4_3.4.0-0 ubuntu3.5_powerpc.deb

KDE KDE 3.4

• KDE post-3.4.3-kdelibs-kjs.diff
  ftp://ftp.kde.org/pub/kde/security_patches/post-3.4.3-kdelibs-kjs.diff

KDE KDE 3.4.1

• KDE post-3.4.3-kdelibs-kjs.diff
  ftp://ftp.kde.org/pub/kde/security_patches/post-3.4.3-kdelibs-kjs.diff

KDE KDE 3.4.2

• KDE post-3.4.3-kdelibs-kjs.diff
  ftp://ftp.kde.org/pub/kde/security_patches/post-3.4.3-kdelibs-kjs.diff


• SuSE kdelibs3-3.4.2-24.2.i586.rpm
  SUSE LINUX 10.0:
  ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/i586/kdelibs3-devel-3 .4.2-24.2.i586.rpm


• SuSE kdelibs3-3.4.2-24.2.ppc.rpm
  SUSE LINUX 10.0:
  ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/ppc/kdelibs3-3.4.2-24 .2.ppc.rpm


• SuSE kdelibs3-3.4.2-24.2.x86_64.rpm
  SUSE LINUX 10.0:
  ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/x86_64/kdelibs3-3.4.2 -24.2.x86_64.rpm


• SuSE kdelibs3-32bit-3.4.2-24.2.x86_64.rpm
  SUSE LINUX 10.0:
  ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/x86_64/kdelibs3-32bit -3.4.2-24.2.x86_64.rpm


• SuSE kdelibs3-devel-3.4.2-24.2.i586.rpm
  SUSE LINUX 10.0:
  ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/i586/kdelibs3-devel-3 .4.2-24.2.i586.rpm


• SuSE kdelibs3-devel-3.4.2-24.2.ppc.rpm
  SUSE LINUX 10.0:
  ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/ppc/kdelibs3-devel-3. 4.2-24.2.ppc.rpm


• SuSE kdelibs3-devel-3.4.2-24.2.x86_64.rpm
  SUSE LINUX 10.0:
  ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/x86_64/kdelibs3-devel -3.4.2-24.2.x86_64.rpm

KDE kdelibs 3.4.3

• Ubuntu kdelibs-bin_3.4.3-0ubuntu2_amd64.deb
  Ubuntu 5.10:
  http://security.ubuntu.com/ubuntu/pool/main/k/kdelibs/kdelibs-bin_3.4. 3-0ubuntu2_amd64.deb


• Ubuntu kdelibs-bin_3.4.3-0ubuntu2_i386.deb
  Ubuntu 5.10:
  http://security.ubuntu.com/ubuntu/pool/main/k/kdelibs/kdelibs-bin_3.4. 3-0ubuntu2_i386.deb


• Ubuntu kdelibs-bin_3.4.3-0ubuntu2_powerpc.deb
  Ubuntu 5.10:
  http://security.ubuntu.com/ubuntu/pool/main/k/kdelibs/kdelibs-bin_3.4. 3-0ubuntu2_powerpc.deb


• Ubuntu kdelibs-data_3.4.3-0ubuntu2_all.deb
  Ubuntu 5.10:
  http://security.ubuntu.com/ubuntu/pool/main/k/kdelibs/kdelibs-data_3.4 .3-0ubuntu2_all.deb


• Ubuntu kdelibs_3.4.3-0ubuntu2_all.deb
  Ubuntu 5.10:
  http://security.ubuntu.com/ubuntu/pool/main/k/kdelibs/kdelibs_3.4.3-0u buntu2_all.deb


• Ubuntu kdelibs4-dev_3.4.3-0ubuntu2_amd64.deb
  Ubuntu 5.10:
  http://security.ubuntu.com/ubuntu/pool/main/k/kdelibs/kdelibs4-dev_3.4 .3-0ubuntu2_amd64.deb


• Ubuntu kdelibs4-dev_3.4.3-0ubuntu2_i386.deb
  Ubuntu 5.10:
  http://security.ubuntu.com/ubuntu/pool/main/k/kdelibs/kdelibs4-dev_3.4 .3-0ubuntu2_i386.deb


• Ubuntu kdelibs4-dev_3.4.3-0ubuntu2_powerpc.deb
  Ubuntu 5.10:
  http://security.ubuntu.com/ubuntu/pool/main/k/kdelibs/kdelibs4-dev_3.4 .3-0ubuntu2_powerpc.deb


• Ubuntu kdelibs4c2-dbg_3.4.3-0ubuntu2_amd64.deb
  Ubuntu 5.10:
  http://security.ubuntu.com/ubuntu/pool/universe/k/kdelibs/kdelibs4c2-d bg_3.4.3-0ubuntu2_amd64.deb


• Ubuntu kdelibs4c2-dbg_3.4.3-0ubuntu2_i386.deb
  Ubuntu 5.10:
  http://security.ubuntu.com/ubuntu/pool/universe/k/kdelibs/kdelibs4c2-d bg_3.4.3-0ubuntu2_i386.deb


• Ubuntu kdelibs4c2-dbg_3.4.3-0ubuntu2_powerpc.deb
  Ubuntu 5.10:
  http://security.ubuntu.com/ubuntu/pool/universe/k/kdelibs/kdelibs4c2-d bg_3.4.3-0ubuntu2_powerpc.deb


• Ubuntu kdelibs4c2_3.4.3-0ubuntu2_amd64.deb
  Ubuntu 5.10:
  http://security.ubuntu.com/ubuntu/pool/main/k/kdelibs/kdelibs4c2_3.4.3 -0ubuntu2_amd64.deb


• Ubuntu kdelibs4c2_3.4.3-0ubuntu2_i386.deb
  Ubuntu 5.10:
  http://security.ubuntu.com/ubuntu/pool/main/k/kdelibs/kdelibs4c2_3.4.3 -0ubuntu2_i386.deb


• Ubuntu kdelibs4c2_3.4.3-0ubuntu2_powerpc.deb
  Ubuntu 5.10:
  http://security.ubuntu.com/ubuntu/pool/main/k/kdelibs/kdelibs4c2_3.4.3 -0ubuntu2_powerpc.deb

KDE KDE 3.5

• KDE post-3.4.3-kdelibs-kjs.diff
  ftp://ftp.kde.org/pub/kde/security_patches/post-3.4.3-kdelibs-kjs.diff