CVE-2006-0019

Heap-based buffer overflow in the encodeURI and decodeURI functions in the kjs JavaScript interpreter engine in KDE 3.2.0 through 3.5.0 allows remote attackers to execute arbitrary code via a crafted, UTF-8 encoded URI.

• ftp://ftp.kde.org/pub/kde/security_patches/post-3.4.3-kdelibs-kjs.diffPatch
• http://secunia.com/advisories/18500Patch, Vendor Advisory
• http://secunia.com/advisories/18540Vendor Advisory
• http://secunia.com/advisories/18552
• http://secunia.com/advisories/18559
• http://secunia.com/advisories/18561Vendor Advisory
• http://secunia.com/advisories/18570
• http://secunia.com/advisories/18583
• http://secunia.com/advisories/18899
• http://securityreason.com/securityalert/364
• http://securitytracker.com/id?1015512
• http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.361107
• http://www.debian.org/security/2006/dsa-948Vendor Advisory
• http://www.gentoo.org/security/en/glsa/glsa-200601-11.xml
• http://www.kde.org/info/security/advisory-20060119-1.txtPatch, Vendor Advisory
• http://www.mandriva.com/security/advisories?name=MDKSA-2006:019
• http://www.osvdb.org/22659
• http://www.redhat.com/support/errata/RHSA-2006-0184.htmlVendor Advisory
• http://www.securityfocus.com/archive/1/422464/100/0/threaded
• http://www.securityfocus.com/archive/1/422489/100/0/threaded
• http://www.securityfocus.com/archive/1/427976/100/0/threaded
• http://www.securityfocus.com/bid/16325
• http://www.ubuntu.com/usn/usn-245-1
• http://www.vupen.com/english/advisories/2006/0265
• https://exchange.xforce.ibmcloud.com/vulnerabilities/24242
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11858
• ftp://ftp.kde.org/pub/kde/security_patches/post-3.4.3-kdelibs-kjs.diffPatch
• http://secunia.com/advisories/18500Patch, Vendor Advisory
• http://secunia.com/advisories/18540Vendor Advisory
• http://secunia.com/advisories/18552
• http://secunia.com/advisories/18559
• http://secunia.com/advisories/18561Vendor Advisory
• http://secunia.com/advisories/18570
• http://secunia.com/advisories/18583
• http://secunia.com/advisories/18899
• http://securityreason.com/securityalert/364
• http://securitytracker.com/id?1015512
• http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.361107
• http://www.debian.org/security/2006/dsa-948Vendor Advisory
• http://www.gentoo.org/security/en/glsa/glsa-200601-11.xml
• http://www.kde.org/info/security/advisory-20060119-1.txtPatch, Vendor Advisory
• http://www.mandriva.com/security/advisories?name=MDKSA-2006:019
• http://www.osvdb.org/22659
• http://www.redhat.com/support/errata/RHSA-2006-0184.htmlVendor Advisory
• http://www.securityfocus.com/archive/1/422464/100/0/threaded
• http://www.securityfocus.com/archive/1/422489/100/0/threaded
• http://www.securityfocus.com/archive/1/427976/100/0/threaded
• http://www.securityfocus.com/bid/16325
• http://www.ubuntu.com/usn/usn-245-1
• http://www.vupen.com/english/advisories/2006/0265
• https://exchange.xforce.ibmcloud.com/vulnerabilities/24242
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11858

Published

Jan 20, 2006

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2006-0013Buffer overflow in the Web Client service (WebClnt.dll) for …
• CVE-2006-0014Buffer overflow in Microsoft Outlook Express 5.5 and 6 allow…
• CVE-2006-0015Cross-site scripting (XSS) vulnerability in _vti_bin/_vti_ad…
• CVE-2006-0016Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2006-0017Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2006-0018Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2006-0020An unspecified Microsoft WMF parsing application, as used in…
• CVE-2006-0021Microsoft Windows XP SP1 and SP2, and Server 2003 up to SP1,…
• CVE-2006-0022Unspecified vulnerability in Microsoft PowerPoint in Microso…
• CVE-2006-0023Microsoft Windows XP SP1 and SP2 before August 2004, and pos…
• CVE-2006-0024Multiple unspecified vulnerabilities in Adobe Flash Player 8…
• CVE-2006-0025Stack-based buffer overflow in Microsoft Windows Media Playe…