CVE-2006-0019: Kde

High severity, CVSS 7.5. EPSS: 6.1% chance of exploitation in the next 30 days.

Heap-based buffer overflow in the encodeURI and decodeURI functions in the kjs JavaScript interpreter engine in KDE 3.2.0 through 3.5.0 allows remote attackers to execute arbitrary code via a crafted, UTF-8 encoded URI.

Affected products

• Kde Kde: version 3.2 only; version 3.2.0 only; version 3.2.0_beta1 only; version 3.2.1 only; version 3.2.2 only; version 3.2.3 only; …

Published 2006-01-20. Last modified 2026-06-16.