Ubuntu Security Notice 872-1: KDE 4 Runtime vulnerabilities

 

It was discovered that the KIO subsystem of KDE did not properly perform input validation when processing help:// URIs. If a user or KIO application processed a crafted help:// URI, an attacker could trigger JavaScript execution or access files via directory traversal…

 

Read More