CVE-2008-5712

The HTML parser in KDE Konqueror 3.5.9 allows remote attackers to cause a denial of service application crash via 1 a long COLOR attribute in an HR element; or a long a BGCOLOR or b BORDERCOLOR attribute in a 2 TABLE, 3 TD, or 4 TR element. NOTE: the FONT vector is already covered by CVE-2008-451...

CVE-2008-5712

The CVE-2008-5712 issue affects KDE Konqueror 3.5.9 where the HTML parser can trigger a denial of service (application crash) by parsing overly long attributes: (1) COLOR in HR, and (2) BGCOLOR or BORDERCOLOR in TABLE, TD, or TR elements. The FONT vector is noted as covered by CVE-2008-4514. Root...

Information disclosure

HTMLTokenizer::scriptHandler in Konqueror in KDE 3.5.9 and 3.5.10 allows remote attackers to cause a denial of service application crash via an invalid document.load call that triggers use of a deleted object. NOTE: some of these details are obtained from third party information...

CVE-2008-5698

HTMLTokenizer::scriptHandler in Konqueror in KDE 3.5.9 and 3.5.10 allows remote attackers to cause a denial of service application crash via an invalid document.load call that triggers use of a deleted object. NOTE: some of these details are obtained from third party information...

CVE-2008-5698

HTMLTokenizer::scriptHandler in Konqueror in KDE 3.5.9 and 3.5.10 allows remote attackers to cause a denial of service application crash via an invalid document.load call that triggers use of a deleted object. NOTE: some of these details are obtained from third party information...

CVE-2008-5698

CVE-2008-5698 affects Konqueror (KDE 3.5.9 and 3.5.10). The vulnerability is described as a denial of service caused by an invalid document.load call that triggers use of a deleted object in HTMLTokenizer::scriptHandler. The issue is a remote-triggered crash and is linked to the use of a deleted ...

CVE-2008-5698

HTMLTokenizer::scriptHandler in Konqueror in KDE 3.5.9 and 3.5.10 allows remote attackers to cause a denial of service application crash via an invalid document.load call that triggers use of a deleted object. NOTE: some of these details are obtained from third party information...

Konqueror 3.5.9 (load) Remote Crash Vulnerability

No description provided by source. !--- Jeremy Brown [email protected]/http://jbrownsec.blogspot.com Tested on Ubuntu 8.04 + Konqueror 3.5.9 A product of my fuzzing projects : -- html script type="text/javascript" document.load''; /script /html...

KDE Konqueror 3.5.9 - JavaScript load Denial of Service

KDE Konqueror 3.5.9 - JavaScript load Denial of Service source: https://www.securityfocus.com/bid/31696/info KDE Konqueror is prone to a remote denial-of-service vulnerability because it fails to handle specially crafted JavaScript code. An attacker may exploit this vulnerability to cause Konquer...

Konqueror 3.5.9 - load Remote Crash

Konqueror 3.5.9 - load Remote Crash document.load''; milw0rm.com 2008-10-10...

Konqueror 3.5.9 (load) Remote Crash Vulnerability

Exploit for linux platform in category dos / poc ================================================= Konqueror 3.5.9 load Remote Crash Vulnerability ================================================= document.load''; 0day.today 2018-04-02...

Konqueror 3.5.9 - 'load' Remote Crash

document.load''; milw0rm.com 2008-10-10...

KDE Konqueror 3.5.9 - JavaScript 'load' Denial of Service

source: https://www.securityfocus.com/bid/31696/info KDE Konqueror is prone to a remote denial-of-service vulnerability because it fails to handle specially crafted JavaScript code. An attacker may exploit this vulnerability to cause Konqueror to crash, resulting in denial-of-service conditions...

CVE-2008-4514

The HTML parser in KDE Konqueror 3.5.9 allows remote attackers to cause a denial of service application crash via a font tag with a long color value, which triggers an assertion error...

CVE-2008-4514

The HTML parser in KDE Konqueror 3.5.9 allows remote attackers to cause a denial of service application crash via a font tag with a long color value, which triggers an assertion error...

CVE-2008-4514

The CVE-2008-4514 entry covers a Denial of Service in KDE Konqueror 3.5.9’s HTML parser, triggered by a font tag with an excessively long color value that leads to an assertion error and application crash. Related disclosures (CVE-2008-5712) describe the same DoS condition via long COLOR attribut...

Konqueror 3.5.9 (font color) Multiple Remote Crash Vulnerabilities

No description provided by source. KDE's Konqueror & Color Attribute Love perl -e 'print "html\n" . "font color=" . "A" x 500000 . "\n/html"' kdie.html perl -e 'print "html\n" . "hr color=" . "A" x 500000 . "\n/html"' kdie2.html perl -e 'print "html\n" . "table bgcolor=" . "A" x 500000 . "\n/html...

konqueror-crash.txt

KDE's Konqueror & Color Attribute Love perl -e 'print "\n" . "\n"' kdie.html perl -e 'print "\n" . "\n"' kdie2.html perl -e 'print "\n" . "\n"' kdie3.html KDE's Konqueror & Color Attribute Love perl -e 'print "\n" . "\n"' kdie.html perl -e 'print "\n" . "\n"' kdie2.html perl -e 'print "\n" . "\n"...

Konqueror 3.5.9 - colorbgcolor Multiple Remote Crash Vulnerabilities

Konqueror 3.5.9 - colorbgcolor Multiple Remote Crash Vulnerabilities KDE's Konqueror & Color Attribute Love perl -e 'print "\n" . "\n"' kdie.html perl -e 'print "\n" . "\n"' kdie2.html perl -e 'print "\n" . "\n"' kdie3.html perl -e 'print "\n" . "\n"' kdie4.html perl -e 'print "\n" . "\n"'...

KDE Konqueror字体颜色'断言'拒绝服务漏洞

BUGTRAQ ID: 31605 CNCAN ID：CNCAN-2008100805 Konqueror是一款桌面环境的文件管理器，也可用于浏览WEB。 Konqueror处理特殊构建的HMTL 'font'标签，远程攻击者可以利用漏洞对应用程序进行拒绝服务攻击。 构建特殊的WEB页，诱使Konqueror处理可导致应用程序崩溃。 KDE Konqueror 3.5.9 目前没有解决方案提供： http://www.konqueror.org/ perl -e 'print "html\n" . "font color=" . "A" x 500000 . "\n/html"'...