CVE-2003-1478: Buffer Overflow
Published Dec 31, 2003
·Updated
Konqueror in KDE 3.0.3 allows remote attackers to cause a denial of service (core dump) via a web page that begins with a "xFFxFE" byte sequence and a large number of CRLF sequences, as demonstrated using freeze.htm.
Affected Software
1 affected component
Konqueror=3.0.3
Event History
Dec 31, 2003
CVE Published
05:00 AM
Data Sourced
via NVD·05:00 AM
DescriptionSeverityWeaknessAffected Software
Oct 25, 2007
CVE Published
via MITRE·03:00 AM
Data Sourced
via MITRE·03:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2003-1478?
CVE-2003-1478 is classified as a denial of service vulnerability.
2
How do I fix CVE-2003-1478?
To fix CVE-2003-1478, upgrade Konqueror to a version later than 3.0.3.
3
What causes the denial of service in CVE-2003-1478?
The denial of service in CVE-2003-1478 is triggered by a web page containing a specific byte sequence followed by excessive CRLF sequences.
4
Which versions of Konqueror are affected by CVE-2003-1478?
CVE-2003-1478 affects Konqueror version 3.0.3.
5
What is the impact of CVE-2003-1478?
The impact of CVE-2003-1478 is that it can cause Konqueror to crash, leading to service disruption.