Vulnerability-Lookup

CVE-2011-1168 (GCVE-0-2011-1168)

Vulnerability from cvelistv5 – Published: 2011-04-18 18:00 – Updated: 2024-08-06 22:14

Summary

Cross-site scripting (XSS) vulnerability in the KHTMLPart::htmlError function in khtml/khtml_part.cpp in Konqueror in KDE SC 4.4.0 through 4.6.1 allows remote attackers to inject arbitrary web script or HTML via the URI in a URL corresponding to an unavailable web site.

Severity

No CVSS data available.

CWE

Assigner

redhat redhat root Scorecard

References

18 references

URL	Tags
http://www.vupen.com/english/advisories/2011/0990	vdb-entryx_refsource_VUPEN
http://www.mandriva.com/security/advisories?name=…	vendor-advisoryx_refsource_MANDRIVA
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://www.securityfocus.com/archive/1/517433/100…	mailing-listx_refsource_BUGTRAQ
http://secunia.com/advisories/44108	third-party-advisoryx_refsource_SECUNIA
http://www.securityfocus.com/bid/47304	vdb-entryx_refsource_BID
http://www.securityfocus.com/archive/1/517432/100…	mailing-listx_refsource_BUGTRAQ
http://www.ubuntu.com/usn/USN-1110-1	vendor-advisoryx_refsource_UBUNTU
http://www.vupen.com/english/advisories/2011/0928	vdb-entryx_refsource_VUPEN
http://secunia.com/advisories/44065	third-party-advisoryx_refsource_SECUNIA
https://bugzilla.redhat.com/show_bug.cgi?id=695398	x_refsource_CONFIRM
http://securityreason.com/securityalert/8208	third-party-advisoryx_refsource_SREASON
https://exchange.xforce.ibmcloud.com/vulnerabilit…	vdb-entryx_refsource_XF
http://www.vupen.com/english/advisories/2011/0927	vdb-entryx_refsource_VUPEN
http://slackware.com/security/viewer.php?l=slackw…	vendor-advisoryx_refsource_SLACKWARE
http://www.kde.org/info/security/advisory-2011041…	x_refsource_CONFIRM
http://www.nth-dimension.org.uk/pub/NDSA20110321.…	x_refsource_MISC
http://securitytracker.com/id?1025322	vdb-entryx_refsource_SECTRACK

Date Public

2011-04-11 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T22:14:27.829Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "ADV-2011-0990",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2011/0990"
          },
          {
            "name": "MDVSA-2011:075",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2011:075"
          },
          {
            "name": "SUSE-SR:2011:009",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2011-05/msg00005.html"
          },
          {
            "name": "20110412 Re: [Full-disclosure] Medium severity flaw in Konqueror",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/517433/100/0/threaded"
          },
          {
            "name": "44108",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/44108"
          },
          {
            "name": "47304",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/47304"
          },
          {
            "name": "20110411 Medium severity flaw in Konqueror",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/517432/100/0/threaded"
          },
          {
            "name": "USN-1110-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-1110-1"
          },
          {
            "name": "ADV-2011-0928",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2011/0928"
          },
          {
            "name": "44065",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/44065"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=695398"
          },
          {
            "name": "8208",
            "tags": [
              "third-party-advisory",
              "x_refsource_SREASON",
              "x_transferred"
            ],
            "url": "http://securityreason.com/securityalert/8208"
          },
          {
            "name": "konqueror-khtmlparthtmlerror-xss(66697)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/66697"
          },
          {
            "name": "ADV-2011-0927",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2011/0927"
          },
          {
            "name": "SSA:2011-101-02",
            "tags": [
              "vendor-advisory",
              "x_refsource_SLACKWARE",
              "x_transferred"
            ],
            "url": "http://slackware.com/security/viewer.php?l=slackware-security\u0026y=2011\u0026m=slackware-security.329727"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.kde.org/info/security/advisory-20110411-1.txt"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://www.nth-dimension.org.uk/pub/NDSA20110321.txt.asc"
          },
          {
            "name": "1025322",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://securitytracker.com/id?1025322"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2011-04-11T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Cross-site scripting (XSS) vulnerability in the KHTMLPart::htmlError function in khtml/khtml_part.cpp in Konqueror in KDE SC 4.4.0 through 4.6.1 allows remote attackers to inject arbitrary web script or HTML via the URI in a URL corresponding to an unavailable web site."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-10-09T18:57:01.000Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "ADV-2011-0990",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2011/0990"
        },
        {
          "name": "MDVSA-2011:075",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2011:075"
        },
        {
          "name": "SUSE-SR:2011:009",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2011-05/msg00005.html"
        },
        {
          "name": "20110412 Re: [Full-disclosure] Medium severity flaw in Konqueror",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/517433/100/0/threaded"
        },
        {
          "name": "44108",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/44108"
        },
        {
          "name": "47304",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/47304"
        },
        {
          "name": "20110411 Medium severity flaw in Konqueror",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/517432/100/0/threaded"
        },
        {
          "name": "USN-1110-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-1110-1"
        },
        {
          "name": "ADV-2011-0928",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2011/0928"
        },
        {
          "name": "44065",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/44065"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=695398"
        },
        {
          "name": "8208",
          "tags": [
            "third-party-advisory",
            "x_refsource_SREASON"
          ],
          "url": "http://securityreason.com/securityalert/8208"
        },
        {
          "name": "konqueror-khtmlparthtmlerror-xss(66697)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/66697"
        },
        {
          "name": "ADV-2011-0927",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2011/0927"
        },
        {
          "name": "SSA:2011-101-02",
          "tags": [
            "vendor-advisory",
            "x_refsource_SLACKWARE"
          ],
          "url": "http://slackware.com/security/viewer.php?l=slackware-security\u0026y=2011\u0026m=slackware-security.329727"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.kde.org/info/security/advisory-20110411-1.txt"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://www.nth-dimension.org.uk/pub/NDSA20110321.txt.asc"
        },
        {
          "name": "1025322",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://securitytracker.com/id?1025322"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2011-1168",
    "datePublished": "2011-04-18T18:00:00.000Z",
    "dateReserved": "2011-03-03T00:00:00.000Z",
    "dateUpdated": "2024-08-06T22:14:27.829Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2011-1168",
      "date": "2026-10-03",
      "epss": "0.02673",
      "percentile": "0.85279"
    },
    "nvd": {
      "cve": {
        "configurations": [
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:a:kde:kde_sc:4.4.0:*:*:*:*:*:*:*",
                    "matchCriteriaId": "A0D84A35-4355-4BBB-BC67-A455EDC8A213",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:kde:kde_sc:4.4.0:beta1:*:*:*:*:*:*",
                    "matchCriteriaId": "DDC30651-790E-48C9-B979-5948B72B92CA",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:kde:kde_sc:4.4.0:beta2:*:*:*:*:*:*",
                    "matchCriteriaId": "3C0B5127-B5F9-490D-90E6-79963555472B",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:kde:kde_sc:4.4.0:rc1:*:*:*:*:*:*",
                    "matchCriteriaId": "CE030856-57FE-4FA0-BE88-5D038C24E927",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:kde:kde_sc:4.4.0:rc2:*:*:*:*:*:*",
                    "matchCriteriaId": "FB2B3EC5-713F-4996-8532-DBCEE7D32481",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:kde:kde_sc:4.4.0:rc3:*:*:*:*:*:*",
                    "matchCriteriaId": "CACB3D53-D2B4-4105-816A-3B286C57B229",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:kde:kde_sc:4.4.1:*:*:*:*:*:*:*",
                    "matchCriteriaId": "376563D6-9847-4596-8E7F-A1B4E4437DA9",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:kde:kde_sc:4.4.2:*:*:*:*:*:*:*",
                    "matchCriteriaId": "CF01B401-CDAF-4853-B582-EC13A352A4B2",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:kde:kde_sc:4.4.3:*:*:*:*:*:*:*",
                    "matchCriteriaId": "59FFB800-D27D-4B7F-A895-C757B18B3201",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:kde:kde_sc:4.4.4:*:*:*:*:*:*:*",
                    "matchCriteriaId": "2BE342C5-6E49-4755-BC09-FAA51523199C",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:kde:kde_sc:4.4.5:*:*:*:*:*:*:*",
                    "matchCriteriaId": "F7F5F040-4B36-45FA-B730-98E4F0BB59BF",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:kde:kde_sc:4.5.0:*:*:*:*:*:*:*",
                    "matchCriteriaId": "8F4D61AB-0779-4D26-8024-8A3826D92D0F",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:kde:kde_sc:4.5.1:*:*:*:*:*:*:*",
                    "matchCriteriaId": "A3AF44C7-111A-47C1-AF0C-F02BBA9A8534",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:kde:kde_sc:4.5.2:*:*:*:*:*:*:*",
                    "matchCriteriaId": "D8EFA68C-DDF6-4261-B179-8AADC40ED9CD",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:kde:kde_sc:4.5.3:*:*:*:*:*:*:*",
                    "matchCriteriaId": "A69631D8-3ED7-414B-AF55-AD94361E1948",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:kde:kde_sc:4.5.4:*:*:*:*:*:*:*",
                    "matchCriteriaId": "D18DFB35-684E-493F-8ED8-F3C9A0A0BD29",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:kde:kde_sc:4.5.5:*:*:*:*:*:*:*",
                    "matchCriteriaId": "552DC1C8-906D-4687-BD5E-4E5E6157920A",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:kde:kde_sc:4.6:beta1:*:*:*:*:*:*",
                    "matchCriteriaId": "13656B17-85C2-4EEE-AB94-FCAB8388098F",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:kde:kde_sc:4.6:beta2:*:*:*:*:*:*",
                    "matchCriteriaId": "A5E7A2FA-0221-46EC-A4DA-B11223DF46D4",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:kde:kde_sc:4.6:rc1:*:*:*:*:*:*",
                    "matchCriteriaId": "8FC0F7F7-0880-4CFD-8B9B-C17C35C78B45",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:kde:kde_sc:4.6:rc2:*:*:*:*:*:*",
                    "matchCriteriaId": "47E83142-5F28-47EB-AAD8-84922853D560",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:kde:kde_sc:4.6.0:*:*:*:*:*:*:*",
                    "matchCriteriaId": "E1DD81D2-BCAD-4230-BD02-C38F7EE8AF17",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:kde:kde_sc:4.6.1:*:*:*:*:*:*:*",
                    "matchCriteriaId": "F2F3E300-B7D7-4A3F-8DEF-4BBD9E98DBE5",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ]
          }
        ],
        "cveTags": [],
        "descriptions": [
          {
            "lang": "en",
            "value": "Cross-site scripting (XSS) vulnerability in the KHTMLPart::htmlError function in khtml/khtml_part.cpp in Konqueror in KDE SC 4.4.0 through 4.6.1 allows remote attackers to inject arbitrary web script or HTML via the URI in a URL corresponding to an unavailable web site."
          },
          {
            "lang": "es",
            "value": "Vulnerabilidad de ejecuci\u00f3n de secuencias de comandos en sitios cruzados (XSS)  en la funci\u00f3n KHTMLPart::htmlError en khtml/khtml_part.cpp en Konqueror en KDE SC v4.4.0 hasta v4.6.1, permite a usuarios remotos inyectar script o HTML de su elecci\u00f3n a trav\u00e9s de URI en una URL correspondiente a una sitio web no disponible."
          }
        ],
        "id": "CVE-2011-1168",
        "lastModified": "2026-04-29T01:13:23.040",
        "metrics": {
          "cvssMetricV2": [
            {
              "acInsufInfo": false,
              "baseSeverity": "MEDIUM",
              "cvssData": {
                "accessComplexity": "MEDIUM",
                "accessVector": "NETWORK",
                "authentication": "NONE",
                "availabilityImpact": "NONE",
                "baseScore": 4.3,
                "confidentialityImpact": "NONE",
                "integrityImpact": "PARTIAL",
                "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
                "version": "2.0"
              },
              "exploitabilityScore": 8.6,
              "impactScore": 2.9,
              "obtainAllPrivilege": false,
              "obtainOtherPrivilege": false,
              "obtainUserPrivilege": false,
              "source": "nvd@nist.gov",
              "type": "Primary",
              "userInteractionRequired": false
            }
          ]
        },
        "published": "2011-04-18T18:55:00.970",
        "references": [
          {
            "source": "secalert@redhat.com",
            "url": "http://lists.opensuse.org/opensuse-security-announce/2011-05/msg00005.html"
          },
          {
            "source": "secalert@redhat.com",
            "tags": [
              "Vendor Advisory"
            ],
            "url": "http://secunia.com/advisories/44065"
          },
          {
            "source": "secalert@redhat.com",
            "tags": [
              "Vendor Advisory"
            ],
            "url": "http://secunia.com/advisories/44108"
          },
          {
            "source": "secalert@redhat.com",
            "url": "http://securityreason.com/securityalert/8208"
          },
          {
            "source": "secalert@redhat.com",
            "url": "http://securitytracker.com/id?1025322"
          },
          {
            "source": "secalert@redhat.com",
            "url": "http://slackware.com/security/viewer.php?l=slackware-security\u0026y=2011\u0026m=slackware-security.329727"
          },
          {
            "source": "secalert@redhat.com",
            "tags": [
              "Exploit",
              "Vendor Advisory"
            ],
            "url": "http://www.kde.org/info/security/advisory-20110411-1.txt"
          },
          {
            "source": "secalert@redhat.com",
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2011:075"
          },
          {
            "source": "secalert@redhat.com",
            "tags": [
              "Exploit"
            ],
            "url": "http://www.nth-dimension.org.uk/pub/NDSA20110321.txt.asc"
          },
          {
            "source": "secalert@redhat.com",
            "url": "http://www.securityfocus.com/archive/1/517432/100/0/threaded"
          },
          {
            "source": "secalert@redhat.com",
            "url": "http://www.securityfocus.com/archive/1/517433/100/0/threaded"
          },
          {
            "source": "secalert@redhat.com",
            "url": "http://www.securityfocus.com/bid/47304"
          },
          {
            "source": "secalert@redhat.com",
            "url": "http://www.ubuntu.com/usn/USN-1110-1"
          },
          {
            "source": "secalert@redhat.com",
            "tags": [
              "Vendor Advisory"
            ],
            "url": "http://www.vupen.com/english/advisories/2011/0927"
          },
          {
            "source": "secalert@redhat.com",
            "tags": [
              "Vendor Advisory"
            ],
            "url": "http://www.vupen.com/english/advisories/2011/0928"
          },
          {
            "source": "secalert@redhat.com",
            "tags": [
              "Vendor Advisory"
            ],
            "url": "http://www.vupen.com/english/advisories/2011/0990"
          },
          {
            "source": "secalert@redhat.com",
            "tags": [
              "Exploit"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=695398"
          },
          {
            "source": "secalert@redhat.com",
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/66697"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://lists.opensuse.org/opensuse-security-announce/2011-05/msg00005.html"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Vendor Advisory"
            ],
            "url": "http://secunia.com/advisories/44065"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Vendor Advisory"
            ],
            "url": "http://secunia.com/advisories/44108"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://securityreason.com/securityalert/8208"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://securitytracker.com/id?1025322"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://slackware.com/security/viewer.php?l=slackware-security\u0026y=2011\u0026m=slackware-security.329727"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Exploit",
              "Vendor Advisory"
            ],
            "url": "http://www.kde.org/info/security/advisory-20110411-1.txt"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2011:075"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Exploit"
            ],
            "url": "http://www.nth-dimension.org.uk/pub/NDSA20110321.txt.asc"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://www.securityfocus.com/archive/1/517432/100/0/threaded"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://www.securityfocus.com/archive/1/517433/100/0/threaded"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://www.securityfocus.com/bid/47304"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://www.ubuntu.com/usn/USN-1110-1"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Vendor Advisory"
            ],
            "url": "http://www.vupen.com/english/advisories/2011/0927"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Vendor Advisory"
            ],
            "url": "http://www.vupen.com/english/advisories/2011/0928"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Vendor Advisory"
            ],
            "url": "http://www.vupen.com/english/advisories/2011/0990"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Exploit"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=695398"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/66697"
          }
        ],
        "sourceIdentifier": "secalert@redhat.com",
        "vulnStatus": "Modified",
        "weaknesses": [
          {
            "description": [
              {
                "lang": "en",
                "value": "CWE-79"
              }
            ],
            "source": "nvd@nist.gov",
            "type": "Primary"
          }
        ]
      }
    },
    "redhat_vex": {
      "aggregate_severity": "Moderate",
      "current_release_date": "2025-11-21T12:58:13+00:00",
      "cve": "CVE-2011-1168",
      "id": "CVE-2011-1168",
      "initial_release_date": "2011-04-11T00:00:00+00:00",
      "product_status:fixed": "120",
      "product_status:known_not_affected": "2",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "kdelibs: partially universal XSS in Konqueror error pages",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2011/cve-2011-1168.json",
      "version": "3"
    }
  }
}

CERTA-2011-AVI-231

Vulnerability from certfr_avis - Published: 2011-04-18 - Updated: 2011-04-18

Plusieurs vulnérabilités permettant une injection de code indirecte à distance ainsi qu'une attaque de type man-in-the-middle ont été découvertes dans kde4libs.

Description

Deux vulnérabilités ont été découvertes dans kde4libs.

La première (CVE-2011-1094) permet à une personne malintentionnée d'effectuer une attaque de type man-in-the-middle. Cette faille provient d'une mauvaise gestion des certificats SSL par le module KDE KSSL, lorsque que ces derniers ont été émis pour une adresse IP.

La seconde (CVE-2011-1168) permet d'injecter indirectement du code à distance. Le module KDE KHTML ne protège pas correctement les urls lors de la génération de pages d'erreur, autorisant ainsi un attaquant à injecter indirectement du code via une url spécialement conçue.

Solution

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

None

Impacted products

Vendor	Product	Description
Ubuntu	Ubuntu	Ubuntu 10.04 LTS ;
Ubuntu	Ubuntu	Ubuntu 10.10 ;
Ubuntu	Ubuntu	Ubuntu 9.10.

References

Title

Publication Time

FKIE_CVE-2011-1168

Vulnerability from fkie_nvd - Published: 2011-04-18 18:55 - Updated: 2026-06-16 23:28

Severity

Summary

References

URL	Tags
secalert@redhat.com	http://lists.opensuse.org/opensuse-security-announce/2011-05/msg00005.html
secalert@redhat.com	http://secunia.com/advisories/44065	Vendor Advisory
secalert@redhat.com	http://secunia.com/advisories/44108	Vendor Advisory
secalert@redhat.com	http://securityreason.com/securityalert/8208
secalert@redhat.com	http://securitytracker.com/id?1025322
secalert@redhat.com	http://slackware.com/security/viewer.php?l=slackware-security&y=2011&m=slackware-security.329727
secalert@redhat.com	http://www.kde.org/info/security/advisory-20110411-1.txt	Exploit, Vendor Advisory
secalert@redhat.com	http://www.mandriva.com/security/advisories?name=MDVSA-2011:075
secalert@redhat.com	http://www.nth-dimension.org.uk/pub/NDSA20110321.txt.asc	Exploit
secalert@redhat.com	http://www.securityfocus.com/archive/1/517432/100/0/threaded
secalert@redhat.com	http://www.securityfocus.com/archive/1/517433/100/0/threaded
secalert@redhat.com	http://www.securityfocus.com/bid/47304
secalert@redhat.com	http://www.ubuntu.com/usn/USN-1110-1
secalert@redhat.com	http://www.vupen.com/english/advisories/2011/0927	Vendor Advisory
secalert@redhat.com	http://www.vupen.com/english/advisories/2011/0928	Vendor Advisory
secalert@redhat.com	http://www.vupen.com/english/advisories/2011/0990	Vendor Advisory
secalert@redhat.com	https://bugzilla.redhat.com/show_bug.cgi?id=695398	Exploit
secalert@redhat.com	https://exchange.xforce.ibmcloud.com/vulnerabilities/66697
af854a3a-2127-422b-91ae-364da2661108	http://lists.opensuse.org/opensuse-security-announce/2011-05/msg00005.html
af854a3a-2127-422b-91ae-364da2661108	http://secunia.com/advisories/44065	Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108	http://secunia.com/advisories/44108	Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108	http://securityreason.com/securityalert/8208
af854a3a-2127-422b-91ae-364da2661108	http://securitytracker.com/id?1025322
af854a3a-2127-422b-91ae-364da2661108	http://slackware.com/security/viewer.php?l=slackware-security&y=2011&m=slackware-security.329727
af854a3a-2127-422b-91ae-364da2661108	http://www.kde.org/info/security/advisory-20110411-1.txt	Exploit, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108	http://www.mandriva.com/security/advisories?name=MDVSA-2011:075
af854a3a-2127-422b-91ae-364da2661108	http://www.nth-dimension.org.uk/pub/NDSA20110321.txt.asc	Exploit
af854a3a-2127-422b-91ae-364da2661108	http://www.securityfocus.com/archive/1/517432/100/0/threaded
af854a3a-2127-422b-91ae-364da2661108	http://www.securityfocus.com/archive/1/517433/100/0/threaded
af854a3a-2127-422b-91ae-364da2661108	http://www.securityfocus.com/bid/47304
af854a3a-2127-422b-91ae-364da2661108	http://www.ubuntu.com/usn/USN-1110-1
af854a3a-2127-422b-91ae-364da2661108	http://www.vupen.com/english/advisories/2011/0927	Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108	http://www.vupen.com/english/advisories/2011/0928	Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108	http://www.vupen.com/english/advisories/2011/0990	Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108	https://bugzilla.redhat.com/show_bug.cgi?id=695398	Exploit
af854a3a-2127-422b-91ae-364da2661108	https://exchange.xforce.ibmcloud.com/vulnerabilities/66697

Impacted products

Vendor	Product	Version
kde	kde_sc	4.4.0
kde	kde_sc	4.4.0
kde	kde_sc	4.4.0
kde	kde_sc	4.4.0
kde	kde_sc	4.4.0
kde	kde_sc	4.4.0
kde	kde_sc	4.4.1
kde	kde_sc	4.4.2
kde	kde_sc	4.4.3
kde	kde_sc	4.4.4
kde	kde_sc	4.4.5
kde	kde_sc	4.5.0
kde	kde_sc	4.5.1
kde	kde_sc	4.5.2
kde	kde_sc	4.5.3
kde	kde_sc	4.5.4
kde	kde_sc	4.5.5
kde	kde_sc	4.6
kde	kde_sc	4.6
kde	kde_sc	4.6
kde	kde_sc	4.6
kde	kde_sc	4.6.0
kde	kde_sc	4.6.1

JSON

To clipboard

{
  "affected": [
    {
      "affectedData": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "source": "secalert@redhat.com"
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:kde:kde_sc:4.4.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "A0D84A35-4355-4BBB-BC67-A455EDC8A213",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:kde:kde_sc:4.4.0:beta1:*:*:*:*:*:*",
              "matchCriteriaId": "DDC30651-790E-48C9-B979-5948B72B92CA",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:kde:kde_sc:4.4.0:beta2:*:*:*:*:*:*",
              "matchCriteriaId": "3C0B5127-B5F9-490D-90E6-79963555472B",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:kde:kde_sc:4.4.0:rc1:*:*:*:*:*:*",
              "matchCriteriaId": "CE030856-57FE-4FA0-BE88-5D038C24E927",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:kde:kde_sc:4.4.0:rc2:*:*:*:*:*:*",
              "matchCriteriaId": "FB2B3EC5-713F-4996-8532-DBCEE7D32481",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:kde:kde_sc:4.4.0:rc3:*:*:*:*:*:*",
              "matchCriteriaId": "CACB3D53-D2B4-4105-816A-3B286C57B229",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:kde:kde_sc:4.4.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "376563D6-9847-4596-8E7F-A1B4E4437DA9",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:kde:kde_sc:4.4.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "CF01B401-CDAF-4853-B582-EC13A352A4B2",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:kde:kde_sc:4.4.3:*:*:*:*:*:*:*",
              "matchCriteriaId": "59FFB800-D27D-4B7F-A895-C757B18B3201",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:kde:kde_sc:4.4.4:*:*:*:*:*:*:*",
              "matchCriteriaId": "2BE342C5-6E49-4755-BC09-FAA51523199C",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:kde:kde_sc:4.4.5:*:*:*:*:*:*:*",
              "matchCriteriaId": "F7F5F040-4B36-45FA-B730-98E4F0BB59BF",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:kde:kde_sc:4.5.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "8F4D61AB-0779-4D26-8024-8A3826D92D0F",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:kde:kde_sc:4.5.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "A3AF44C7-111A-47C1-AF0C-F02BBA9A8534",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:kde:kde_sc:4.5.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "D8EFA68C-DDF6-4261-B179-8AADC40ED9CD",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:kde:kde_sc:4.5.3:*:*:*:*:*:*:*",
              "matchCriteriaId": "A69631D8-3ED7-414B-AF55-AD94361E1948",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:kde:kde_sc:4.5.4:*:*:*:*:*:*:*",
              "matchCriteriaId": "D18DFB35-684E-493F-8ED8-F3C9A0A0BD29",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:kde:kde_sc:4.5.5:*:*:*:*:*:*:*",
              "matchCriteriaId": "552DC1C8-906D-4687-BD5E-4E5E6157920A",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:kde:kde_sc:4.6:beta1:*:*:*:*:*:*",
              "matchCriteriaId": "13656B17-85C2-4EEE-AB94-FCAB8388098F",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:kde:kde_sc:4.6:beta2:*:*:*:*:*:*",
              "matchCriteriaId": "A5E7A2FA-0221-46EC-A4DA-B11223DF46D4",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:kde:kde_sc:4.6:rc1:*:*:*:*:*:*",
              "matchCriteriaId": "8FC0F7F7-0880-4CFD-8B9B-C17C35C78B45",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:kde:kde_sc:4.6:rc2:*:*:*:*:*:*",
              "matchCriteriaId": "47E83142-5F28-47EB-AAD8-84922853D560",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:kde:kde_sc:4.6.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "E1DD81D2-BCAD-4230-BD02-C38F7EE8AF17",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:kde:kde_sc:4.6.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "F2F3E300-B7D7-4A3F-8DEF-4BBD9E98DBE5",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Cross-site scripting (XSS) vulnerability in the KHTMLPart::htmlError function in khtml/khtml_part.cpp in Konqueror in KDE SC 4.4.0 through 4.6.1 allows remote attackers to inject arbitrary web script or HTML via the URI in a URL corresponding to an unavailable web site."
    },
    {
      "lang": "es",
      "value": "Vulnerabilidad de ejecuci\u00f3n de secuencias de comandos en sitios cruzados (XSS)  en la funci\u00f3n KHTMLPart::htmlError en khtml/khtml_part.cpp en Konqueror en KDE SC v4.4.0 hasta v4.6.1, permite a usuarios remotos inyectar script o HTML de su elecci\u00f3n a trav\u00e9s de URI en una URL correspondiente a una sitio web no disponible."
    }
  ],
  "id": "CVE-2011-1168",
  "lastModified": "2026-06-16T23:28:51.613",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "MEDIUM",
        "cvssData": {
          "accessComplexity": "MEDIUM",
          "accessVector": "NETWORK",
          "authentication": "NONE",
          "availabilityImpact": "NONE",
          "baseScore": 4.3,
          "confidentialityImpact": "NONE",
          "integrityImpact": "PARTIAL",
          "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
          "version": "2.0"
        },
        "exploitabilityScore": 8.6,
        "impactScore": 2.9,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": false
      }
    ]
  },
  "published": "2011-04-18T18:55:00.970",
  "references": [
    {
      "source": "secalert@redhat.com",
      "url": "http://lists.opensuse.org/opensuse-security-announce/2011-05/msg00005.html"
    },
    {
      "source": "secalert@redhat.com",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/44065"
    },
    {
      "source": "secalert@redhat.com",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/44108"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://securityreason.com/securityalert/8208"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://securitytracker.com/id?1025322"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://slackware.com/security/viewer.php?l=slackware-security\u0026y=2011\u0026m=slackware-security.329727"
    },
    {
      "source": "secalert@redhat.com",
      "tags": [
        "Exploit",
        "Vendor Advisory"
      ],
      "url": "http://www.kde.org/info/security/advisory-20110411-1.txt"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2011:075"
    },
    {
      "source": "secalert@redhat.com",
      "tags": [
        "Exploit"
      ],
      "url": "http://www.nth-dimension.org.uk/pub/NDSA20110321.txt.asc"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://www.securityfocus.com/archive/1/517432/100/0/threaded"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://www.securityfocus.com/archive/1/517433/100/0/threaded"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://www.securityfocus.com/bid/47304"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://www.ubuntu.com/usn/USN-1110-1"
    },
    {
      "source": "secalert@redhat.com",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://www.vupen.com/english/advisories/2011/0927"
    },
    {
      "source": "secalert@redhat.com",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://www.vupen.com/english/advisories/2011/0928"
    },
    {
      "source": "secalert@redhat.com",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://www.vupen.com/english/advisories/2011/0990"
    },
    {
      "source": "secalert@redhat.com",
      "tags": [
        "Exploit"
      ],
      "url": "https://bugzilla.redhat.com/show_bug.cgi?id=695398"
    },
    {
      "source": "secalert@redhat.com",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/66697"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://lists.opensuse.org/opensuse-security-announce/2011-05/msg00005.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/44065"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/44108"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://securityreason.com/securityalert/8208"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://securitytracker.com/id?1025322"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://slackware.com/security/viewer.php?l=slackware-security\u0026y=2011\u0026m=slackware-security.329727"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Exploit",
        "Vendor Advisory"
      ],
      "url": "http://www.kde.org/info/security/advisory-20110411-1.txt"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2011:075"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Exploit"
      ],
      "url": "http://www.nth-dimension.org.uk/pub/NDSA20110321.txt.asc"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.securityfocus.com/archive/1/517432/100/0/threaded"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.securityfocus.com/archive/1/517433/100/0/threaded"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.securityfocus.com/bid/47304"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.ubuntu.com/usn/USN-1110-1"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://www.vupen.com/english/advisories/2011/0927"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://www.vupen.com/english/advisories/2011/0928"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://www.vupen.com/english/advisories/2011/0990"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Exploit"
      ],
      "url": "https://bugzilla.redhat.com/show_bug.cgi?id=695398"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/66697"
    }
  ],
  "sourceIdentifier": "secalert@redhat.com",
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-79"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}

GHSA-85GJ-974C-3VJJ

Vulnerability from github – Published: 2022-05-14 02:56 – Updated: 2022-05-14 02:56

Details

Show details on source website

JSON

To clipboard

{
  "affected": [],
  "aliases": [
    "CVE-2011-1168"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-79"
    ],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2011-04-18T18:55:00Z",
    "severity": "MODERATE"
  },
  "details": "Cross-site scripting (XSS) vulnerability in the KHTMLPart::htmlError function in khtml/khtml_part.cpp in Konqueror in KDE SC 4.4.0 through 4.6.1 allows remote attackers to inject arbitrary web script or HTML via the URI in a URL corresponding to an unavailable web site.",
  "id": "GHSA-85gj-974c-3vjj",
  "modified": "2022-05-14T02:56:09Z",
  "published": "2022-05-14T02:56:09Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2011-1168"
    },
    {
      "type": "WEB",
      "url": "https://access.redhat.com/errata/RHSA-2011:0464"
    },
    {
      "type": "WEB",
      "url": "https://access.redhat.com/security/cve/CVE-2011-1168"
    },
    {
      "type": "WEB",
      "url": "https://bugzilla.redhat.com/show_bug.cgi?id=695398"
    },
    {
      "type": "WEB",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/66697"
    },
    {
      "type": "WEB",
      "url": "http://lists.opensuse.org/opensuse-security-announce/2011-05/msg00005.html"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/44065"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/44108"
    },
    {
      "type": "WEB",
      "url": "http://securityreason.com/securityalert/8208"
    },
    {
      "type": "WEB",
      "url": "http://securitytracker.com/id?1025322"
    },
    {
      "type": "WEB",
      "url": "http://slackware.com/security/viewer.php?l=slackware-security\u0026y=2011\u0026m=slackware-security.329727"
    },
    {
      "type": "WEB",
      "url": "http://www.kde.org/info/security/advisory-20110411-1.txt"
    },
    {
      "type": "WEB",
      "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2011:075"
    },
    {
      "type": "WEB",
      "url": "http://www.nth-dimension.org.uk/pub/NDSA20110321.txt.asc"
    },
    {
      "type": "WEB",
      "url": "http://www.securityfocus.com/archive/1/517432/100/0/threaded"
    },
    {
      "type": "WEB",
      "url": "http://www.securityfocus.com/archive/1/517433/100/0/threaded"
    },
    {
      "type": "WEB",
      "url": "http://www.securityfocus.com/bid/47304"
    },
    {
      "type": "WEB",
      "url": "http://www.ubuntu.com/usn/USN-1110-1"
    },
    {
      "type": "WEB",
      "url": "http://www.vupen.com/english/advisories/2011/0927"
    },
    {
      "type": "WEB",
      "url": "http://www.vupen.com/english/advisories/2011/0928"
    },
    {
      "type": "WEB",
      "url": "http://www.vupen.com/english/advisories/2011/0990"
    }
  ],
  "schema_version": "1.4.0",
  "severity": []
}

GSD-2011-1168

Vulnerability from gsd - Updated: 2023-12-13 01:19

Details

Aliases

CVE-2011-1168

Aliases

CVE-2011-1168

JSON

To clipboard

{
  "GSD": {
    "alias": "CVE-2011-1168",
    "description": "Cross-site scripting (XSS) vulnerability in the KHTMLPart::htmlError function in khtml/khtml_part.cpp in Konqueror in KDE SC 4.4.0 through 4.6.1 allows remote attackers to inject arbitrary web script or HTML via the URI in a URL corresponding to an unavailable web site.",
    "id": "GSD-2011-1168",
    "references": [
      "https://www.suse.com/security/cve/CVE-2011-1168.html",
      "https://access.redhat.com/errata/RHSA-2011:0464",
      "https://linux.oracle.com/cve/CVE-2011-1168.html",
      "https://packetstormsecurity.com/files/cve/CVE-2011-1168"
    ]
  },
  "gsd": {
    "metadata": {
      "exploitCode": "unknown",
      "remediation": "unknown",
      "reportConfidence": "confirmed",
      "type": "vulnerability"
    },
    "osvSchema": {
      "aliases": [
        "CVE-2011-1168"
      ],
      "details": "Cross-site scripting (XSS) vulnerability in the KHTMLPart::htmlError function in khtml/khtml_part.cpp in Konqueror in KDE SC 4.4.0 through 4.6.1 allows remote attackers to inject arbitrary web script or HTML via the URI in a URL corresponding to an unavailable web site.",
      "id": "GSD-2011-1168",
      "modified": "2023-12-13T01:19:07.609214Z",
      "schema_version": "1.4.0"
    }
  },
  "namespaces": {
    "cve.org": {
      "CVE_data_meta": {
        "ASSIGNER": "secalert@redhat.com",
        "ID": "CVE-2011-1168",
        "STATE": "PUBLIC"
      },
      "affects": {
        "vendor": {
          "vendor_data": [
            {
              "product": {
                "product_data": [
                  {
                    "product_name": "n/a",
                    "version": {
                      "version_data": [
                        {
                          "version_affected": "=",
                          "version_value": "n/a"
                        }
                      ]
                    }
                  }
                ]
              },
              "vendor_name": "n/a"
            }
          ]
        }
      },
      "data_format": "MITRE",
      "data_type": "CVE",
      "data_version": "4.0",
      "description": {
        "description_data": [
          {
            "lang": "eng",
            "value": "Cross-site scripting (XSS) vulnerability in the KHTMLPart::htmlError function in khtml/khtml_part.cpp in Konqueror in KDE SC 4.4.0 through 4.6.1 allows remote attackers to inject arbitrary web script or HTML via the URI in a URL corresponding to an unavailable web site."
          }
        ]
      },
      "problemtype": {
        "problemtype_data": [
          {
            "description": [
              {
                "lang": "eng",
                "value": "n/a"
              }
            ]
          }
        ]
      },
      "references": {
        "reference_data": [
          {
            "name": "http://lists.opensuse.org/opensuse-security-announce/2011-05/msg00005.html",
            "refsource": "MISC",
            "url": "http://lists.opensuse.org/opensuse-security-announce/2011-05/msg00005.html"
          },
          {
            "name": "http://secunia.com/advisories/44108",
            "refsource": "MISC",
            "url": "http://secunia.com/advisories/44108"
          },
          {
            "name": "http://www.ubuntu.com/usn/USN-1110-1",
            "refsource": "MISC",
            "url": "http://www.ubuntu.com/usn/USN-1110-1"
          },
          {
            "name": "http://www.vupen.com/english/advisories/2011/0990",
            "refsource": "MISC",
            "url": "http://www.vupen.com/english/advisories/2011/0990"
          },
          {
            "name": "http://secunia.com/advisories/44065",
            "refsource": "MISC",
            "url": "http://secunia.com/advisories/44065"
          },
          {
            "name": "http://securityreason.com/securityalert/8208",
            "refsource": "MISC",
            "url": "http://securityreason.com/securityalert/8208"
          },
          {
            "name": "http://securitytracker.com/id?1025322",
            "refsource": "MISC",
            "url": "http://securitytracker.com/id?1025322"
          },
          {
            "name": "http://slackware.com/security/viewer.php?l=slackware-security\u0026y=2011\u0026m=slackware-security.329727",
            "refsource": "MISC",
            "url": "http://slackware.com/security/viewer.php?l=slackware-security\u0026y=2011\u0026m=slackware-security.329727"
          },
          {
            "name": "http://www.kde.org/info/security/advisory-20110411-1.txt",
            "refsource": "MISC",
            "url": "http://www.kde.org/info/security/advisory-20110411-1.txt"
          },
          {
            "name": "http://www.mandriva.com/security/advisories?name=MDVSA-2011:075",
            "refsource": "MISC",
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2011:075"
          },
          {
            "name": "http://www.nth-dimension.org.uk/pub/NDSA20110321.txt.asc",
            "refsource": "MISC",
            "url": "http://www.nth-dimension.org.uk/pub/NDSA20110321.txt.asc"
          },
          {
            "name": "http://www.securityfocus.com/archive/1/517432/100/0/threaded",
            "refsource": "MISC",
            "url": "http://www.securityfocus.com/archive/1/517432/100/0/threaded"
          },
          {
            "name": "http://www.securityfocus.com/archive/1/517433/100/0/threaded",
            "refsource": "MISC",
            "url": "http://www.securityfocus.com/archive/1/517433/100/0/threaded"
          },
          {
            "name": "http://www.securityfocus.com/bid/47304",
            "refsource": "MISC",
            "url": "http://www.securityfocus.com/bid/47304"
          },
          {
            "name": "http://www.vupen.com/english/advisories/2011/0927",
            "refsource": "MISC",
            "url": "http://www.vupen.com/english/advisories/2011/0927"
          },
          {
            "name": "http://www.vupen.com/english/advisories/2011/0928",
            "refsource": "MISC",
            "url": "http://www.vupen.com/english/advisories/2011/0928"
          },
          {
            "name": "https://exchange.xforce.ibmcloud.com/vulnerabilities/66697",
            "refsource": "MISC",
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/66697"
          },
          {
            "name": "https://bugzilla.redhat.com/show_bug.cgi?id=695398",
            "refsource": "MISC",
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=695398"
          }
        ]
      }
    },
    "nvd.nist.gov": {
      "configurations": {
        "CVE_data_version": "4.0",
        "nodes": [
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:a:kde:kde_sc:4.5.2:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:kde:kde_sc:4.4.0:rc1:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:kde:kde_sc:4.6:beta1:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:kde:kde_sc:4.5.4:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:kde:kde_sc:4.4.1:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:kde:kde_sc:4.4.0:beta1:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:kde:kde_sc:4.6:rc1:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:kde:kde_sc:4.4.2:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:kde:kde_sc:4.5.5:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:kde:kde_sc:4.5.1:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:kde:kde_sc:4.4.0:beta2:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:kde:kde_sc:4.4.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:kde:kde_sc:4.4.3:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:kde:kde_sc:4.6.1:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:kde:kde_sc:4.6:rc2:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:kde:kde_sc:4.4.4:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:kde:kde_sc:4.5.3:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:kde:kde_sc:4.4.5:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:kde:kde_sc:4.6:beta2:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:kde:kde_sc:4.4.0:rc2:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:kde:kde_sc:4.6.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:kde:kde_sc:4.4.0:rc3:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:kde:kde_sc:4.5.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              }
            ],
            "operator": "OR"
          }
        ]
      },
      "cve": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert@redhat.com",
          "ID": "CVE-2011-1168"
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "en",
              "value": "Cross-site scripting (XSS) vulnerability in the KHTMLPart::htmlError function in khtml/khtml_part.cpp in Konqueror in KDE SC 4.4.0 through 4.6.1 allows remote attackers to inject arbitrary web script or HTML via the URI in a URL corresponding to an unavailable web site."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "en",
                  "value": "CWE-79"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "47304",
              "refsource": "BID",
              "tags": [],
              "url": "http://www.securityfocus.com/bid/47304"
            },
            {
              "name": "http://www.kde.org/info/security/advisory-20110411-1.txt",
              "refsource": "CONFIRM",
              "tags": [
                "Exploit",
                "Vendor Advisory"
              ],
              "url": "http://www.kde.org/info/security/advisory-20110411-1.txt"
            },
            {
              "name": "ADV-2011-0927",
              "refsource": "VUPEN",
              "tags": [
                "Vendor Advisory"
              ],
              "url": "http://www.vupen.com/english/advisories/2011/0927"
            },
            {
              "name": "http://www.nth-dimension.org.uk/pub/NDSA20110321.txt.asc",
              "refsource": "MISC",
              "tags": [
                "Exploit"
              ],
              "url": "http://www.nth-dimension.org.uk/pub/NDSA20110321.txt.asc"
            },
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=695398",
              "refsource": "CONFIRM",
              "tags": [
                "Exploit"
              ],
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=695398"
            },
            {
              "name": "1025322",
              "refsource": "SECTRACK",
              "tags": [],
              "url": "http://securitytracker.com/id?1025322"
            },
            {
              "name": "44065",
              "refsource": "SECUNIA",
              "tags": [
                "Vendor Advisory"
              ],
              "url": "http://secunia.com/advisories/44065"
            },
            {
              "name": "USN-1110-1",
              "refsource": "UBUNTU",
              "tags": [],
              "url": "http://www.ubuntu.com/usn/USN-1110-1"
            },
            {
              "name": "ADV-2011-0928",
              "refsource": "VUPEN",
              "tags": [
                "Vendor Advisory"
              ],
              "url": "http://www.vupen.com/english/advisories/2011/0928"
            },
            {
              "name": "44108",
              "refsource": "SECUNIA",
              "tags": [
                "Vendor Advisory"
              ],
              "url": "http://secunia.com/advisories/44108"
            },
            {
              "name": "SSA:2011-101-02",
              "refsource": "SLACKWARE",
              "tags": [],
              "url": "http://slackware.com/security/viewer.php?l=slackware-security\u0026y=2011\u0026m=slackware-security.329727"
            },
            {
              "name": "ADV-2011-0990",
              "refsource": "VUPEN",
              "tags": [
                "Vendor Advisory"
              ],
              "url": "http://www.vupen.com/english/advisories/2011/0990"
            },
            {
              "name": "MDVSA-2011:075",
              "refsource": "MANDRIVA",
              "tags": [],
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2011:075"
            },
            {
              "name": "8208",
              "refsource": "SREASON",
              "tags": [],
              "url": "http://securityreason.com/securityalert/8208"
            },
            {
              "name": "SUSE-SR:2011:009",
              "refsource": "SUSE",
              "tags": [],
              "url": "http://lists.opensuse.org/opensuse-security-announce/2011-05/msg00005.html"
            },
            {
              "name": "konqueror-khtmlparthtmlerror-xss(66697)",
              "refsource": "XF",
              "tags": [],
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/66697"
            },
            {
              "name": "20110412 Re: [Full-disclosure] Medium severity flaw in Konqueror",
              "refsource": "BUGTRAQ",
              "tags": [],
              "url": "http://www.securityfocus.com/archive/1/517433/100/0/threaded"
            },
            {
              "name": "20110411 Medium severity flaw in Konqueror",
              "refsource": "BUGTRAQ",
              "tags": [],
              "url": "http://www.securityfocus.com/archive/1/517432/100/0/threaded"
            }
          ]
        }
      },
      "impact": {
        "baseMetricV2": {
          "acInsufInfo": false,
          "cvssV2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "NONE",
            "baseScore": 4.3,
            "confidentialityImpact": "NONE",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "version": "2.0"
          },
          "exploitabilityScore": 8.6,
          "impactScore": 2.9,
          "obtainAllPrivilege": false,
          "obtainOtherPrivilege": false,
          "obtainUserPrivilege": false,
          "severity": "MEDIUM",
          "userInteractionRequired": false
        }
      },
      "lastModifiedDate": "2023-02-13T04:29Z",
      "publishedDate": "2011-04-18T18:55Z"
    }
  }
}

RHSA-2011:0464

Vulnerability from csaf_redhat - Published: 2011-04-21 16:54 - Updated: 2026-06-25 10:37

Summary

Red Hat Security Advisory: kdelibs security update

Severity

Moderate

Scope

2 vulnerabilities in this advisory, including CVE-2011-1168.

CVE-2011-1168

4.3 ()


                
                  AV:N/AC:M/Au:N/C:N/I:P/A:N

Fixed: 56 products

https://access.redhat.com/errata/RHSA-2011:0464

Open the full advisory

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

CVE-2011-1168 (GCVE-0-2011-1168)

CERTA-2011-AVI-231

Description

Solution

FKIE_CVE-2011-1168

GHSA-85GJ-974C-3VJJ

GSD-2011-1168

RHSA-2011:0464

Tags

Sightings

Nomenclature

Related by attack behaviour