J-Security Center

Title: KDE KDELibs 'dtoa()' Remote Code Execution Vulnerability

Severity: HIGH

Description:

KDE (K Desktop Environment) is a desktop for Unix variants.

KDE is prone to a remote code-execution vulnerability in KDELibs. Specifically, this issue arises when the 'dtoa()' function parses strings into floating-point numbers. Applications using the vulnerable libraries may allow malicious code to gain unauthorized access to memory. For example, malicious JavaScript code executed by the Konqueror browser could access the affected library function and trigger this vulnerability.

Successful exploits may allow an attacker to obtain sensitive information and execute arbitrary code in the context of the vulnerable application. Failed attacks may cause denial-of-service conditions.

The attacker can exploit this issue by enticing an unsuspecting victim to view a malicious webpage.

NOTE: This issue is related to BID 35510 (Multiple BSD Distributions 'gdtoa/misc.c' Memory Corruption Vulnerability), but because of differences in the code base, it is being assigned its own record.

This issue affects KDE KDELibs 4.3.3; other versions may also be affected.

Affected Products:

  • KDE KDE 4.3.3
  • Linux kernel 2.6.5
  • S.u.S.E. Linux Enterprise Server 10 SP3
  • S.u.S.E. Linux Enterprise Server 10.SP2 SP
  • S.u.S.E. Linux Enterprise Server 11
  • S.u.S.E. Linux Enterprise Server 9
  • S.u.S.E. Novell Linux Desktop 9
  • S.u.S.E. Open-Enterprise-Server
  • S.u.S.E. openSUSE 11.0
  • S.u.S.E. openSUSE 11.1
  • S.u.S.E. openSUSE 11.2

References:

Juniper Networks provides this content via a wide variety of sources and production methods. If notified of errors or omissions in the content of this page, Juniper Networks, at its discretion, will modify or remove the page or leave the content as is, depending on various factors including but not limited to the reputation and authority of the party providing the notification. Please use the contact information displayed elsewhere on this page to report any errors or omissions regarding the content on this page.