Skip to content
OpenAdvisories
Unscored RHSA-2007:0909 6 CVEs

Red Hat Security Advisory: kdelibs security update

Published Sep 15, 2024 · Updated Jun 26, 2026

Ecosystem: Red Hat

Fixed packages 22

ReleasePackageFixed in
Red Hat · RHEL 4 enterprise_linux:4::as kdelibs 6:3.3.1-9.el4
Red Hat · RHEL 4 enterprise_linux:4::as kdelibs-debuginfo 6:3.3.1-9.el4
Red Hat · RHEL 4 enterprise_linux:4::as kdelibs-devel 6:3.3.1-9.el4
Red Hat · RHEL 4 enterprise_linux:4::desktop kdelibs 6:3.3.1-9.el4
Red Hat · RHEL 4 enterprise_linux:4::desktop kdelibs-debuginfo 6:3.3.1-9.el4
Red Hat · RHEL 4 enterprise_linux:4::desktop kdelibs-devel 6:3.3.1-9.el4
Red Hat · RHEL 4 enterprise_linux:4::es kdelibs 6:3.3.1-9.el4
Red Hat · RHEL 4 enterprise_linux:4::es kdelibs-debuginfo 6:3.3.1-9.el4
Red Hat · RHEL 4 enterprise_linux:4::es kdelibs-devel 6:3.3.1-9.el4
Red Hat · RHEL 4 enterprise_linux:4::ws kdelibs 6:3.3.1-9.el4
Red Hat · RHEL 4 enterprise_linux:4::ws kdelibs-debuginfo 6:3.3.1-9.el4
Red Hat · RHEL 4 enterprise_linux:4::ws kdelibs-devel 6:3.3.1-9.el4
Red Hat · RHEL 5 enterprise_linux:5::client kdelibs 6:3.5.4-13.el5
Red Hat · RHEL 5 enterprise_linux:5::client kdelibs-apidocs 6:3.5.4-13.el5
Red Hat · RHEL 5 enterprise_linux:5::client kdelibs-debuginfo 6:3.5.4-13.el5
Red Hat · RHEL 5 enterprise_linux:5::client_workstation kdelibs 6:3.5.4-13.el5
Red Hat · RHEL 5 enterprise_linux:5::client_workstation kdelibs-debuginfo 6:3.5.4-13.el5
Red Hat · RHEL 5 enterprise_linux:5::client_workstation kdelibs-devel 6:3.5.4-13.el5
Red Hat · RHEL 5 enterprise_linux:5::server kdelibs 6:3.5.4-13.el5
Red Hat · RHEL 5 enterprise_linux:5::server kdelibs-apidocs 6:3.5.4-13.el5
Red Hat · RHEL 5 enterprise_linux:5::server kdelibs-debuginfo 6:3.5.4-13.el5
Red Hat · RHEL 5 enterprise_linux:5::server kdelibs-devel 6:3.5.4-13.el5

Vulnerabilities 6

  • Unscored —
    CVE-2007-0242

    The UTF-8 decoder in codecs/qutfcodec.cpp in Qt 3.3.8 and 4.2.3 does not reject long UTF-8 sequences as required by the…

  • Unscored —
    CVE-2007-0537

    The KDE HTML library (kdelibs), as used by Konqueror 3.5.5, does not properly parse HTML comments, which allows remote …

  • Unscored —
    CVE-2007-1308 Public exploit

    ecma/kjs_html.cpp in KDE JavaScript (KJS), as used in Konqueror in KDE 3.5.5, allows remote attackers to cause a denial…

  • Unscored —
    CVE-2007-1564 Public exploit

    The FTP protocol implementation in Konqueror 3.5.5 allows remote servers to force the client to connect to other server…

  • Unscored —
    CVE-2007-3820

    konqueror/konq_combo.cc in Konqueror 3.5.7 allows remote attackers to spoof the data: URI scheme in the address bar via…

  • Unscored —
    CVE-2007-4224

    KDE Konqueror 3.5.7 allows remote attackers to spoof the URL address bar by calling setInterval with a small interval a…

References

  • article
    http://www.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=229606
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=233592
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=234633
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=248537
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=251708
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=299891
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2007/rhsa-2007_0909.json
  • report
    https://access.redhat.com/security/cve/CVE-2007-0242
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2007-0242
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2007-0242
  • report
    https://access.redhat.com/security/cve/CVE-2007-0537
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2007-0537
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2007-0537
  • report
    https://access.redhat.com/security/cve/CVE-2007-1308
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2007-1308
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2007-1308
  • report
    https://access.redhat.com/security/cve/CVE-2007-1564
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2007-1564
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2007-1564
  • report
    https://access.redhat.com/security/cve/CVE-2007-3820
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2007-3820
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2007-3820
  • report
    https://access.redhat.com/security/cve/CVE-2007-4224
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2007-4224
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2007-4224