CVE-2006-6297: Medium severity kde kdegraphics vulnerability
Stack consumption vulnerability in the KFILE JPEG (kfilejpeg) plugin in kdegraphics 3, as used by konqueror, digikam, and other KDE image browsers, allows remote attackers to cause a denial of service (stack consumption) via a crafted EXIF section in a JPEG file, which results in an infinite recursion.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2006-6297?
CVE-2006-6297 has been classified as a denial of service vulnerability due to stack consumption.
How do I fix CVE-2006-6297?
To fix CVE-2006-6297, update to a patched version of KDE Graphics that addresses this vulnerability.
Which versions of KDE Graphics are affected by CVE-2006-6297?
Versions 3.2 and 3.4.3 of KDE Graphics are affected by CVE-2006-6297.
What applications use the vulnerable KFILE JPEG plugin related to CVE-2006-6297?
Applications like Konqueror and Digikam utilize the vulnerable KFILE JPEG plugin affected by CVE-2006-6297.
What type of attack is possible using CVE-2006-6297?
CVE-2006-6297 allows remote attackers to craft a malicious JPEG file that causes a denial of service through infinite recursion.