Harri Porten
14/07/07, 23:26
This message is in MIME format. The first part should be readable text,
while the remaining parts are likely unreadable without MIME-aware tools.
--8323328-1323314767-1184443897=:8339
Content-Type: TEXT/PLAIN; charset=US-ASCII; format=flowed
Hi!
> With a specially crafted web page, an attacker can redirect
> a www browser to the page, which URL (in the url bar) resembles
> an arbitrary domain choosen by the attacker.
Attached is a patch that just got applied in KDE's repository to fix the
problem in Konqueror.
Thanks for the report,
Harri.
--8323328-1323314767-1184443897=:8339
Content-Type: TEXT/plain; charset=US-ASCII; name=location.diff
Content-Transfer-Encoding: BASE64
Content-ID: <Pine.LNX.4.64.0707142211370.8339@pudel.froglogic.c om>
Content-Description:
Content-Disposition: attachment; filename=location.diff
SW5kZXg6IGtvbnF1ZXJvci9rb25xX2NvbWJvLmNjDQo9PT09PT 09PT09PT09
PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT 09PT09PT09
PT09PT09PT09DQotLS0ga29ucXVlcm9yL2tvbnFfY29tYm8uY2 MJKHJldmlz
aW9uIDY0Mzc4MikNCisrKyBrb25xdWVyb3Iva29ucV9jb21iby 5jYwkod29y
a2luZyBjb3B5KQ0KQEAgLTE1OCw2ICsxNTgsNyBAQA0KICAgIC AgICAga2Fw
cC0+ZGNvcENsaWVudCgpLT5zZW5kKCAia29ucXVlcm9yKiIsIC JLb25xdWVy
b3JJZmFjZSIsDQogICAgICAgICAgICAgICAgICAgICAgICAgIC AgICAgICAg
ICJhZGRUb0NvbWJvKFFTdHJpbmcsUUNTdHJpbmcpIiwgZGF0YS k7DQogICAg
IH0NCisgICAgbGluZUVkaXQoKS0+c2V0Q3Vyc29yUG9zaXRpb2 4oIDAgKTsN
CiB9DQogDQogdm9pZCBLb25xQ29tYm86OnNldFRlbXBvcmFyeS ggY29uc3Qg
UVN0cmluZyYgdGV4dCApDQo=
--8323328-1323314767-1184443897=:8339--
while the remaining parts are likely unreadable without MIME-aware tools.
--8323328-1323314767-1184443897=:8339
Content-Type: TEXT/PLAIN; charset=US-ASCII; format=flowed
Hi!
> With a specially crafted web page, an attacker can redirect
> a www browser to the page, which URL (in the url bar) resembles
> an arbitrary domain choosen by the attacker.
Attached is a patch that just got applied in KDE's repository to fix the
problem in Konqueror.
Thanks for the report,
Harri.
--8323328-1323314767-1184443897=:8339
Content-Type: TEXT/plain; charset=US-ASCII; name=location.diff
Content-Transfer-Encoding: BASE64
Content-ID: <Pine.LNX.4.64.0707142211370.8339@pudel.froglogic.c om>
Content-Description:
Content-Disposition: attachment; filename=location.diff
SW5kZXg6IGtvbnF1ZXJvci9rb25xX2NvbWJvLmNjDQo9PT09PT 09PT09PT09
PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT 09PT09PT09
PT09PT09PT09DQotLS0ga29ucXVlcm9yL2tvbnFfY29tYm8uY2 MJKHJldmlz
aW9uIDY0Mzc4MikNCisrKyBrb25xdWVyb3Iva29ucV9jb21iby 5jYwkod29y
a2luZyBjb3B5KQ0KQEAgLTE1OCw2ICsxNTgsNyBAQA0KICAgIC AgICAga2Fw
cC0+ZGNvcENsaWVudCgpLT5zZW5kKCAia29ucXVlcm9yKiIsIC JLb25xdWVy
b3JJZmFjZSIsDQogICAgICAgICAgICAgICAgICAgICAgICAgIC AgICAgICAg
ICJhZGRUb0NvbWJvKFFTdHJpbmcsUUNTdHJpbmcpIiwgZGF0YS k7DQogICAg
IH0NCisgICAgbGluZUVkaXQoKS0+c2V0Q3Vyc29yUG9zaXRpb2 4oIDAgKTsN
CiB9DQogDQogdm9pZCBLb25xQ29tYm86OnNldFRlbXBvcmFyeS ggY29uc3Qg
UVN0cmluZyYgdGV4dCApDQo=
--8323328-1323314767-1184443897=:8339--