CVE-2008-5698

HTMLTokenizer::scriptHandler in Konqueror in KDE 3.5.9 and 3.5.10 allows remote attackers to cause a denial of service (application crash) via an invalid document.load call that triggers use of a deleted object. NOTE: some of these details are obtained from third party information.

Affected products

Konqueror

Kde Konqueror

All versions

CVSS 2.0

4.3 MEDIUM

EPSS

3.5% (88th percentile)

Weakness

CWE-399

NVD status

Modified

Published

2008-12-22