CVE-2014-8600

Related Files

Ubuntu Security Notice USN-2414-1

Posted Nov 24, 2014

Authored by Ubuntu | Site security.ubuntu.com

Ubuntu Security Notice 2414-1 - Tim Brown and Darron Burton discovered that KDE-Runtime incorrectly handled input validation. An attacker could possibly use this issue to execute arbitrary javascript.

tags | advisory, arbitrary, javascript

systems | linux, ubuntu

advisories | CVE-2014-8600

SHA-256 | a8e4d35135b503e43f7c352287cd61c345c6b291c09a386e9b98a354fd84ea40

Download | Favorite | View

IO Slaves KDE Insufficient Input Validation

Posted Nov 19, 2014

Authored by D. Burton, T. Brown | Site portcullis-security.com

It was discovered that a number of the protocol handlers (referred to as IO slaves) did not satisfactorily handle malicious input. It is possible for an attacker to inject JavaScript by manipulating IO slave URI such that the JavaScript from the manipulated request is returned in the response.

tags | exploit, javascript, protocol

advisories | CVE-2014-8600

SHA-256 | e347068492c2b02155919e28caab949adb5a3b0bc7cde80b54669e096dfe6353

Download | Favorite | View