Multiple cross-site scripting (XSS) vulnerabilities in KDE-Runtime 4.14.3 and earlier, kwebkitpart 1.3.4 and earlier, and kio-extras 5.1.1 and earlier allow remote attackers to inject arbitrary web script or HTML via a crafted URI using the (1) zip, (2) trash, (3) tar, (4) thumbnail, (5) smtps, (6) smtp, (7) smb, (8) remote, (9) recentdocuments, (10) nntps, (11) nntp, (12) network, (13) mbox, (14) ldaps, (15) ldap, (16) fonts, (17) file, (18) desktop, (19) cgi, (20) bookmarks, or (21) ar scheme, which is not properly handled in an error message.

KDE and QT were updated to fix security issues and bugs.

The following vulerabilities were fixed :

  - CVE-2014-0190: Malformed GIF files could have crashed QT     based applications

  - CVE-2015-0295: Malformed BMP files could have crashed QT     based applications

  - CVE-2014-8600: Multiple cross-site scripting (XSS)     vulnerabilities in the KDE runtime could have allowed     remote attackers to insert arbitrary web script or HTML     via crafted URIs using one of several supported URL     schemes

  - CVE-2014-8483: A missing size check in the Blowfish ECB     could have lead to a crash of Konversation or 11 byte     information leak

  - CVE-2014-3494: The KMail POP3 kioslave accepted invalid     certifiates and allowed a man-in-the-middle (MITM)     attack

Additionally, Konversation was updated to 1.5.1 to fix bugs.

Sanitize input to disallow JavaScript being executed in the context of the referenced hostname. See also https://www.kde.org/info/security/advisory-20141113-1.txt

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

New security fix release, insufficient Input Validation By IO Slaves, see also https://www.kde.org/info/security/advisory-20141113-1.txt

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Tim Brown and Darron Burton discovered that KDE-Runtime incorrectly handled input validation. An attacker could possibly use this issue to execute arbitrary javascript.

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Albert Aastals Cid reports :

kwebkitpart and the bookmarks:// io slave were not sanitizing input correctly allowing to some JavaScript being executed on the context of the referenced hostname.

Whilst in most cases, the JavaScript will be executed in an untrusted context, with the bookmarks IO slave, it will be executed in the context of the referenced hostname. It should however be noted that KDE mitigates this risk by attempting to ensure that such URLs cannot be embedded directly into Internet hosted content.

ID	Name	Product	Family	Severity
82014	openSUSE Security Update : kdebase4-runtime / kdelibs4 / konversation / etc (openSUSE-2015-251)	Nessus	SuSE Local Security Checks	medium
79767	Fedora 19 : kwebkitpart-1.3.4-5.fc19 (2014-15124)	Nessus	Fedora Local Security Checks	medium
79749	Fedora 20 : kwebkitpart-1.3.4-5.fc20 (2014-15130)	Nessus	Fedora Local Security Checks	medium
79701	Fedora 21 : kde-runtime-4.14.3-2.fc21 (2014-15618)	Nessus	Fedora Local Security Checks	medium
79698	Fedora 21 : kwebkitpart-1.3.4-5.fc21 (2014-15150)	Nessus	Fedora Local Security Checks	medium
79566	Fedora 20 : kde-runtime-4.14.3-2.fc20 (2014-15532)	Nessus	Fedora Local Security Checks	medium
79430	Ubuntu 12.04 LTS : kde-runtime vulnerability (USN-2414-1)	Nessus	Ubuntu Local Security Checks	medium
79365	FreeBSD : kwebkitpart, kde-runtime -- insufficient input validation (890b6b22-70fa-11e4-91ae-5453ed2e2b49)	Nessus	FreeBSD Local Security Checks	medium

Detections

Analytics

CVE-2014-8600

medium

Tenable Plugins

medium

medium

medium

medium

medium

medium

medium

medium