1. Ubuntu Security Notices
  2. USN-452-1

USN-452-1: KDE library vulnerability

Publication date

11 April 2007

Overview

KDE library vulnerability

Releases

Details

The Qt library did not correctly handle truncated UTF8 strings, which
could cause some applications to incorrectly filter malicious strings.
If a Konqueror user were tricked into visiting a web site containing
specially crafted strings, normal XSS prevention could be bypassed
allowing a remote attacker to steal confidential data.

The Qt library did not correctly handle truncated UTF8 strings, which
could cause some applications to incorrectly filter malicious strings.
If a Konqueror user were tricked into visiting a web site containing
specially crafted strings, normal XSS prevention could be bypassed
allowing a remote attacker to steal confidential data.

Update instructions

After a standard system upgrade you need to restart your session or reboot your computer to effect the necessary changes.

Learn more about how to get the fixes.

The problem can be corrected by updating your system to the following package versions:

Ubuntu Release Package Version
6.10 edgy libqt3-mt –  3:3.3.6-3ubuntu3.1
kdelibs4c2a –  4:3.5.5-0ubuntu3.4
6.06 dapper libqt3-mt –  3:3.3.6-1ubuntu6.2
kdelibs4c2a –  4:3.5.2-0ubuntu18.4
5.10 breezy libqt3-mt –  3:3.3.4-8ubuntu5.2
kdelibs4c2 –  4:3.4.3-0ubuntu2.4

Reduce your security exposure

Ubuntu Pro provides ten-year security coverage to 25,000+ packages in Main and Universe repositories, and it is free for up to five machines.

Get Ubuntu Pro

References

Have additional questions?

Talk to a member of the team ›