From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from lists.gentoo.org ([140.105.134.102] helo=robin.gentoo.org) by nuthatch.gentoo.org with esmtp (Exim 4.62) (envelope-from ) id 1HQBtz-0002P9-AE for garchives@archives.gentoo.org; Sun, 11 Mar 2007 00:27:07 +0000 Received: from robin.gentoo.org (localhost [127.0.0.1]) by robin.gentoo.org (8.14.0/8.14.0) with SMTP id l2B0OeSq031992; Sun, 11 Mar 2007 00:24:40 GMT Received: from mx1.falcal.net (falco.bz [88.162.192.139]) by robin.gentoo.org (8.14.0/8.14.0) with ESMTP id l2AGZ3qv024001 for ; Sat, 10 Mar 2007 16:35:04 GMT Received: by mx1.falcal.net (Postfix, from userid 1000) id A0B6726E09F; Sat, 10 Mar 2007 17:35:02 +0100 (CET) Date: Sat, 10 Mar 2007 17:35:02 +0100 From: Raphael Marichez To: gentoo-announce@gentoo.org Cc: bugtraq@securityfocus.com, full-disclosure@lists.grok.org.uk, security-alerts@linuxsecurity.com Subject: [gentoo-announce] [ GLSA 200703-10 ] KHTML: Cross-site scripting (XSS) vulnerability Message-ID: <20070310163502.GA20780@falco.falcal.net> Mail-Followup-To: gentoo-announce@gentoo.org, bugtraq@securityfocus.com, full-disclosure@lists.grok.org.uk, security-alerts@linuxsecurity.com Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-announce@gentoo.org MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="ikeVEW9yuYc//A+q" Content-Disposition: inline X-Web: http://falco.bz/ X-GPG-fingerprint: 04EB 153A 6B28 3E80 87A9 9B4F A77C 4BDE 021C 5BD2 X-GPG-Key: http://subkeys.pgp.net:11371/pks/lookup?op=get&search=0x021C5BD2 X-GPG-Subkey: http://subkeys.pgp.net:11371/pks/lookup?op=get&search=0x0114FC45 Organization: Gentoo Linux Security Team User-Agent: mutt-ng/devel-r804 (Linux) X-Archives-Salt: 99c4ee57-defd-4065-9355-10a7eb6ab289 X-Archives-Hash: ed8fc080f66f3313d8c2c6d89ec0388f --ikeVEW9yuYc//A+q Content-Type: text/plain; charset=us-ascii Content-Disposition: inline - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Gentoo Linux Security Advisory GLSA 200703-10 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity: Low Title: KHTML: Cross-site scripting (XSS) vulnerability Date: March 10, 2007 Bugs: #165606 ID: 200703-10 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Synopsis ======== The KHTML component shipped with the KDE libraries is prone to a cross-site scripting (XSS) vulnerability. Background ========== KDE is a feature-rich graphical desktop environment for Linux and Unix-like Operating Systems. KHTML is the HTML interpreter used in Konqueror and other parts of KDE. Affected packages ================= ------------------------------------------------------------------- Package / Vulnerable / Unaffected ------------------------------------------------------------------- 1 kde-base/kdelibs < 3.5.5-r8 >= 3.5.5-r8 Description =========== The KHTML code allows for the execution of JavaScript code located inside the "Title" HTML element, a related issue to the Safari error found by Jose Avila. Impact ====== When viewing a HTML page that renders unsanitized attacker-supplied input in the page title, Konqueror and other parts of KDE will execute arbitrary JavaScript code contained in the page title, allowing for the theft of browser session data or cookies. Workaround ========== There is no known workaround at this time. Resolution ========== All KDElibs users should upgrade to the latest version: # emerge --sync # emerge --ask --oneshot --verbose ">=kde-base/kdelibs-3.5.5-r8" References ========== [ 1 ] CVE-2007-0537 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-0537 [ 2 ] CVE-2007-0478 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-0478 Availability ============ This GLSA and any updates to it are available for viewing at the Gentoo Security Website: http://security.gentoo.org/glsa/glsa-200703-10.xml Concerns? ========= Security is a primary focus of Gentoo Linux and ensuring the confidentiality and security of our users machines is of utmost importance to us. Any security concerns should be addressed to security@gentoo.org or alternatively, you may file a bug at http://bugs.gentoo.org. License ======= Copyright 2007 Gentoo Foundation, Inc; referenced text belongs to its owner(s). The contents of this document are licensed under the Creative Commons - Attribution / Share Alike license. http://creativecommons.org/licenses/by-sa/2.5 --ikeVEW9yuYc//A+q Content-Type: application/pgp-signature Content-Disposition: inline -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.6 (GNU/Linux) iQEVAwUBRfLeNjvRww8BFPxFAQK8nwf+J4eQlEJfsc2/vFw5LsbT88oqtTa0c3Ik 87uVCFa1YMHNrM/E/N5PV6E1Mojan++JL8M2K3zfUkmWi/0Xuuj14eYT7VzifWlh yzi0Y4FY/3OoW7/x6S7OcxvVlFYhQLW7o8vOoq9ePoY7Kx5DyY03ywXERxLK6Up9 GDuLvufxalvOxs2w91f1uYHjS0hk5h2jpoTALev0In9EZBJZD1V8ib3ktvejoAdk VJUdZFwUgt3Rb/OAZN7MZEqbmwrjJUh5r+iG7coIauc0wBL/ik6JLiR0zWyJO1cG 6sCImoINprEueKBPtpHNWP6m3wZ5s7vyDLuvCB9VJyq28SEmi0ijrQ== =RMRr -----END PGP SIGNATURE----- --ikeVEW9yuYc//A+q-- -- gentoo-announce@gentoo.org mailing list