KDE KHTML PNGLoader Heap Buffer Overflow Vulnerability

KDE KHTML PNGLoader Heap Buffer Overflow Vulnerability

KDE KHTML is prone to a remote buffer-overflow vulnerability because it fails to perform adequate bounds checking for user-supplied input while processing malicious PNG files.

Successful exploits allow remote attackers to execute arbitrary machine code in the context of applications that use KHTML. Failed exploit attempts will likely crash applications.

Versions included with KDE from KHTML 4.0 to 4.0.3 are affected by this issue. Since KHTML is included in other third-party packages, they may also be affected, but this has not been confirmed.