KDE LibkHTML NodeType Function Denial Of Service Vulnerability

Bugtraq ID:	21662
Class:	Failure to Handle Exceptional Conditions
CVE:
Remote:	Yes
Local:	No
Published:	Dec 19 2006 12:00AM
Updated:	Dec 19 2006 06:47PM
Credit:	This issue has been discovered by Federico L. Bossi Bonin
Vulnerable:	KDE Libkhtml 4.2 KDE Konqueror 3.5.2 KDE kmail 1.9.1
Not Vulnerable:

KDE LibkHTML NodeType Function Denial Of Service Vulnerability

KDE libkhtml is prone to a denial-of-service vulnerability.

This issue is triggered when an attacker convinces a victim user to open a malicious HTML document via an affected application such as kmail or Konqueror.

Remote attackers may exploit this issue to crash applications that use the affected library, effectively denying service to legitimate users.

KDE LibkHTML NodeType Function Denial Of Service Vulnerability

The following exploit is available:

• /data/vulnerabilities/exploits/21662.html

KDE LibkHTML NodeType Function Denial Of Service Vulnerability

Solution:
Currently we are not aware of any official vendor-supplied patches for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected]:[email protected].

KDE LibkHTML NodeType Function Denial Of Service Vulnerability

References:

• KDE Home Page (KDE)
  
• KMail Home Page (KDE)
  
• Konqueror Homepage (KDE)