CVE-2006-0019

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 6.1% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2006-01-20 · updated 2026-06-16

Description

Heap-based buffer overflow in the encodeURI and decodeURI functions in the kjs JavaScript interpreter engine in KDE 3.2.0 through 3.5.0 allows remote attackers to execute arbitrary code via a crafted, UTF-8 encoded URI.

Affected products

Kde: 3.2, 3.2.0, 3.2.0_beta1, 3.2.1, 3.2.2, 3.2.3 (+11)

References

http://secunia.com/advisories/18500
http://secunia.com/advisories/18540
http://secunia.com/advisories/18552
http://secunia.com/advisories/18559
http://secunia.com/advisories/18561
http://secunia.com/advisories/18570
http://secunia.com/advisories/18583
http://secunia.com/advisories/18899
http://securityreason.com/securityalert/364
http://securitytracker.com/id?1015512
http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.361107

Get alerted when CVE-2006-0019 or the next vulnerability affects your stack