Mandrake Linux Security Advisory : kdelibs (MDKSA-2007:054)

ecma/kjshtml.cpp in KDE JavaScript KJS, as used in Konqueror, allows remote attackers to cause a denial of service crash by accessing the content of an iframe with an ftp:// URI in the src attribute, probably due to a NULL pointer dereference. Updated packages have been patched to address this...

CVE-2007-1308

CVE-2007-1308 affects KDE Konqueror's JavaScript engine (KJS) in KDE 3.5.5, allowing a remote user to cause a denial of service (crash) by loading an iframe with an ftp:// URI in the src attribute (NULL pointer dereference). Concrete details and affected components are documented in connected adv...