Re: buffer overflow with greek characters, NIX

From: KF (dotslash@snosoft.com)
Date: 04/18/02


Date: Thu, 18 Apr 2002 13:16:24 -0400
From: KF <dotslash@snosoft.com>
To: David H <david@uptime.at>

Heres the info on the XFree and KDE issues for those of you concerned...
(Mandrake users less than 8.1 this is YOU I believe)

http://online.securityfocus.com/archive/82/215726
http://online.securityfocus.com/archive/82/209450

http://online.securityfocus.com/cgi-bin/archive.pl?id=82&start=2002-04-15&end=2002-04-21&mid=209547&threads=1
^----- Please see this thread for info on KDE protocol handling...

-KF

David H wrote:

> KF wrote:
>
>> Nah the unix guy is suffering from a bug in X and or in the protocol
>> handling of KDE in general including Konqueror / kmail / file dialog
>> boxes / etc... Long title bars are one way of triggering this. I
>> have posted a few times on this... xterm --title b0fhere may crash
>> your box if you have the bug in X. If its a bug in Konqueror / KDE
>> protocols try making an html file with AAAAAAAA... a few thousand
>> times as the <title>AAA....</title> and open it.
>>
>> -KF
>
>
> I just wanted to correct the good man. Jonqueror itself does not
> handle any protocols. The HTML rendering engine and any part of the
> I/O input subsystem are within the so called IOSlaves. Therefore it is
> wrong to blame the application should there be faults. If there are
> errors in protocol handling, please submit those bugs to bugs.kde.org
> if you haven`t allready or send them directly to me "darian@kde.org"
> and I shall add them to the database for you (one time offer only!).
>
> Please realise, that KDE hasa modular setup where mostr services are
> provided toi applications on a much lower level, they are not
> statically built into the application`s code.
>
> Thank you.
>
>
>



Relevant Pages

  • Re: buffer overflow with greek characters, NIX
    ... > Nah the unix guy is suffering from a bug in X and or in the protocol ... > if you have the bug in X. ... If its a bug in Konqueror / KDE protocols try ...
    (Vuln-Dev)
  • [UNIX] rlogin.protocol and telnet.protocol URL KIO Vulnerability
    ... KDE provides support for various network protocols via the KIO subsystem. ... The implementation of the rlogin protocol in all of the affected systems, ... The vulnerability potentially enables local or remote attackers to ... For affected KDE 3 systems, ...
    (Securiteam)
  • Re: configure a mouse
    ... Trimming context is fine, but you went overboard. ... > Concerning KDE it is within the Control Centre. ... picked the wrong protocol. ... work, since all PS/2 mice support that), USB mice *all* use the IMPS/2 ...
    (comp.os.linux.hardware)
  • Re: buffer overflow with greek characters, NIX
    ... > Nah the unix guy is suffering from a bug in X and or in the protocol ... > if you have the bug in X. ... If its a bug in Konqueror / KDE protocols ...
    (Vuln-Dev)
  • Re: SSHFS for FreeBSD?
    ... Not exactly what you are looking for, but if you run KDE, konqueror ... supports the protocol sftp://. ... Thomas. ...
    (comp.unix.bsd.freebsd.misc)