medium4.3Public exploit code
CVE-2006-6660
The nodeType function in KDE libkhtml 4.2.0 and earlier, as used by Konquerer, KMail, and other programs, allows remote attackers to cause a denial of service …
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- KDE LibkHTML 4.2 - NodeType Function Denial of Service2006-12-19 · dos · linux · Verified
- KDE libkhtml 3.5 < 4.2.0 - Unhandled HTML Parse Exception2006-12-19 · dos · linux · Verified
Impact
The nodeType function in KDE libkhtml 4.2.0 and earlier, as used by Konquerer, KMail, and other programs, allows remote attackers to cause a denial of service (crash) via malformed HTML tags, possibly involving a COL SPAN tag embedded in a RANGE tag.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Kde | Libkhtml | through 4.2.0 |
References
- NVD record
- CVE.org record
- http://downloads.securityfocus.com/vulnerabilities/exploits/21662.html
- http://www.securityfocus.com/bid/21662
- http://www.vupen.com/english/advisories/2006/5071
- http://downloads.securityfocus.com/vulnerabilities/exploits/21662.html
- http://www.securityfocus.com/bid/21662
- http://www.vupen.com/english/advisories/2006/5071