Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 521
Alerts This Week
Warning Icon 1 521

Ubuntu 12.04 LTS USN-2414-1 Critical: kde-runtime Input Flaw

ubuntu
Calendar Grey November 24, 2014
Dist Ubuntu Esm H88
The KDE-Runtime on Ubuntu 12.04 LTS contains a significant vulnerability that permits malicious actors to run arbitrary JavaScript code. It's essential to perform an update immediately!
KDE-Runtime could be made to run arbitrary javascript.

Summary

KDE-Runtime could be made to run arbitrary javascript.

Software Description:

- kde-runtime: runtime components from the official KDE release

Details:

Tim Brown and Darron Burton discovered that KDE-Runtime incorrectly handled

input validation. An attacker could possibly use this issue to execute

arbitrary javascript.

Topics%20covered

Topics Covered

security advisory critical Ubuntu input validation kde-runtime

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 12.04 LTS:
  kde-runtime                     4:4.8.5-0ubuntu0.3

After a standard system update you need to restart your session to make
all the necessary changes.

References

https://ubuntu.com/security/notices/USN-2414-1

CVE-2014-8600

Severity
critical
Lowest
Low
Medium
High
Critical

November 24, 2014

Topics%20covered

Topics Covered

security advisory critical Ubuntu input validation kde-runtime

Package Information

https://launchpad.net/ubuntu/+source/kde-runtime/4:4.8.5-0ubuntu0.3

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.