Bug 652110 (CVE-2009-4975) - CVE-2009-4975 qt4: XSS vulnerability in QtDemoBrowser (webview.cpp)
Summary: CVE-2009-4975 qt4: XSS vulnerability in QtDemoBrowser (webview.cpp)
Keywords:
Status: CLOSED NOTABUG
Alias: CVE-2009-4975
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
medium
medium
Target Milestone: ---
Assignee: Red Hat Product Security
QA Contact:
URL:
Whiteboard:
Depends On: 652111 652112
Blocks:
TreeView+ depends on / blocked
 
Reported: 2010-11-11 01:39 UTC by Vincent Danen
Modified: 2019-09-29 12:40 UTC (History)
3 users (show)

Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Clone Of:
Environment:
Last Closed: 2010-11-11 14:55:53 UTC
Embargoed:

Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
KDE Software Compilation 217464 0 None None None Never

Description Vincent Danen 2010-11-11 01:39:09 UTC 
Common Vulnerabilities and Exposures assigned an identifier CVE-2009-4975 to
the following vulnerability:

Name: CVE-2009-4975
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4975
Assigned: 20100802
Reference: MISC: http://bugreports.qt.nokia.com/browse/QTWEBKIT-22
Reference: MISC: https://bugs.kde.org/show_bug.cgi?id=217464
Reference: MISC: https://bugs.webkit.org/show_bug.cgi?id=32252
Reference: XF:qtdemobrowser-webview-xss(60879)
Reference: URL: http://xforce.iss.net/xforce/xfdb/60879 

Cross-site scripting (XSS) vulnerability in webview.cpp in QtDemoBrowser allows remote attackers to inject arbitrary web script or HTML via a URL associated with a nonexistent domain name, related to a "universal XSS" issue, a similar vulnerability to CVE-2010-2536.
Comment 1 Vincent Danen 2010-11-11 01:40:16 UTC 
Created webkitkde tracking bugs for this issue

Affects: fedora-all [bug 652111]
Comment 2 Vincent Danen 2010-11-11 01:40:19 UTC 
Created arora tracking bugs for this issue

Affects: fedora-all [bug 652112]
Comment 3 nucleo 2010-11-11 14:55:53 UTC 
https://bugs.kde.org/show_bug.cgi?id=217464#c3
This bug was fixed when it was reported.
webkitkde is obsoleted by kwebkitpart-0.9.6 in Fedora 12+.
kwebkitpart-0.9.6 have fix for this bug.
Comment 4 nucleo 2010-11-11 15:03:22 UTC 
See also this thread on kde-devel:
http://mail.kde.org/pipermail/webkit-devel/2010-September/001133.html
Comment 5 Jaroslav Reznik 2010-11-11 15:57:44 UTC 
Seems like Arora just says "Failed to load" in status bar -> no injection to
error page.
Note You need to log in before you can comment on or make changes to this bug.