← Back to branch summary

~ubuntu-branches/ubuntu/breezy/koffice/breezy-security

« back to all changes in this revision

Viewing changes to lib/kofficeui/koPartSelectAction.cc

  • Committer: Bazaar Package Importer
  • Author(s): Jonathan Riddell
  • Date: 2005-10-11 14:49:50 UTC
  • mfrom: (1.1.2 upstream)
  • Revision ID: james.westby@ubuntu.com-20051011144950-lwpngbifzp8nk0ds
Tags: 1:1.4.1-0ubuntu7
* SECURITY UPDATE: fix heap based buffer overflow in the RTF importer of KWord
* Opening specially crafted RTF files in KWord can cause
  execution of abitrary code.
* Add kubuntu_01_rtfimport_heap_overflow.diff
* References:
  CAN-2005-2971
  CESA-2005-005
  http://www.koffice.org/security/advisory-20051011-1.txt

Show diffs side-by-side

added added

removed removed

Lines of Context:
lib/kofficeui/koPartSelectAction.cc
52
52
    for( ; it != m_lstEntries.end(); ++it ) {
53
53
        KService::Ptr serv = (*it).service();
54
54
        if (!serv->genericName().isEmpty()) {
55
 
            KAction *action = new KAction( serv->genericName(), serv->icon(), 0,
 
55
            KAction *action = new KAction( serv->genericName().replace('&',"&&"), serv->icon(), 0,
56
56
                                       this, SLOT( slotActionActivated() ),
57
57
                                       parentCollection(), serv->name().latin1() );
58
58
            insert( action );