CVE-2006-3672

KDE Konqueror 3.5.x - ReplaceChild Denial of Service

Severity Score

2.6

*CVSS v2

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

KDE Konqueror 3.5.1 and earlier allows remote attackers to cause a denial of service (application crash) by calling the replaceChild method on a DOM object, which triggers a null dereference, as demonstrated by calling document.replaceChild with a 0 (zero) argument.

KDE Konqueror 3.5.1 y anteriores permite a atacantes remotos provocar denegación de servicio (caida de aplicación) a través de la llamada al método replaceChild sobre un objeto DOM, el cual dispara una referencia NULL, somo se demostró con la llamada a document.replaceChild con un argumento 0 (zero).

*Credits: N/A

CVSS Scores

NISTv2 2.6

Attack Vector

Network

Attack Complexity

High

Authentication

None

Confidentiality

None

Integrity

None

Availability

Partial

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2006-07-14 First Exploit
2006-07-17 CVE Reserved
2006-07-18 CVE Published
2023-05-21 EPSS Updated
2024-08-07 CVE Updated
---------- Exploited in Wild
---------- KEV Due Date

CWE

CAPEC

References (8)

URL	Tag	Source
http://www.vupen.com/english/advisories/2006/2812	Vdb Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/27744	Vdb Entry

URL	Date	SRC
https://www.exploit-db.com/exploits/28220	2006-07-14
http://browserfun.blogspot.com/2006/07/mobb-14-konqueror-replacechild.html	2024-08-07
http://www.osvdb.org/27058	2024-08-07
http://www.securityfocus.com/bid/18978	2024-08-07

URL	Date	SRC

URL	Date	SRC
http://www.mandriva.com/security/advisories?name=MDKSA-2006:130	2017-07-20
http://www.ubuntu.com/usn/usn-322-1	2017-07-20

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Kde Search vendor "Kde"		Konqueror Search vendor "Kde" for product "Konqueror"				<= 3.5.1 Search vendor "Kde" for product "Konqueror" and version " <= 3.5.1"		-		Affected
Kde Search vendor "Kde"		Konqueror Search vendor "Kde" for product "Konqueror"				2.1.1 Search vendor "Kde" for product "Konqueror" and version "2.1.1"		-		Affected
Kde Search vendor "Kde"		Konqueror Search vendor "Kde" for product "Konqueror"				2.1.2 Search vendor "Kde" for product "Konqueror" and version "2.1.2"		-		Affected
Kde Search vendor "Kde"		Konqueror Search vendor "Kde" for product "Konqueror"				2.2.1 Search vendor "Kde" for product "Konqueror" and version "2.2.1"		-		Affected
Kde Search vendor "Kde"		Konqueror Search vendor "Kde" for product "Konqueror"				2.2.2 Search vendor "Kde" for product "Konqueror" and version "2.2.2"		-		Affected
Kde Search vendor "Kde"		Konqueror Search vendor "Kde" for product "Konqueror"				3.0 Search vendor "Kde" for product "Konqueror" and version "3.0"		-		Affected
Kde Search vendor "Kde"		Konqueror Search vendor "Kde" for product "Konqueror"				3.0.1 Search vendor "Kde" for product "Konqueror" and version "3.0.1"		-		Affected
Kde Search vendor "Kde"		Konqueror Search vendor "Kde" for product "Konqueror"				3.0.2 Search vendor "Kde" for product "Konqueror" and version "3.0.2"		-		Affected
Kde Search vendor "Kde"		Konqueror Search vendor "Kde" for product "Konqueror"				3.0.3 Search vendor "Kde" for product "Konqueror" and version "3.0.3"		-		Affected
Kde Search vendor "Kde"		Konqueror Search vendor "Kde" for product "Konqueror"				3.0.5 Search vendor "Kde" for product "Konqueror" and version "3.0.5"		-		Affected
Kde Search vendor "Kde"		Konqueror Search vendor "Kde" for product "Konqueror"				3.0.5b Search vendor "Kde" for product "Konqueror" and version "3.0.5b"		-		Affected
Kde Search vendor "Kde"		Konqueror Search vendor "Kde" for product "Konqueror"				3.1 Search vendor "Kde" for product "Konqueror" and version "3.1"		-		Affected
Kde Search vendor "Kde"		Konqueror Search vendor "Kde" for product "Konqueror"				3.1.1 Search vendor "Kde" for product "Konqueror" and version "3.1.1"		-		Affected
Kde Search vendor "Kde"		Konqueror Search vendor "Kde" for product "Konqueror"				3.1.2 Search vendor "Kde" for product "Konqueror" and version "3.1.2"		-		Affected
Kde Search vendor "Kde"		Konqueror Search vendor "Kde" for product "Konqueror"				3.1.3 Search vendor "Kde" for product "Konqueror" and version "3.1.3"		-		Affected
Kde Search vendor "Kde"		Konqueror Search vendor "Kde" for product "Konqueror"				3.1.4 Search vendor "Kde" for product "Konqueror" and version "3.1.4"		-		Affected
Kde Search vendor "Kde"		Konqueror Search vendor "Kde" for product "Konqueror"				3.1.5 Search vendor "Kde" for product "Konqueror" and version "3.1.5"		-		Affected
Kde Search vendor "Kde"		Konqueror Search vendor "Kde" for product "Konqueror"				3.2.1 Search vendor "Kde" for product "Konqueror" and version "3.2.1"		-		Affected
Kde Search vendor "Kde"		Konqueror Search vendor "Kde" for product "Konqueror"				3.2.2 Search vendor "Kde" for product "Konqueror" and version "3.2.2"		-		Affected
Kde Search vendor "Kde"		Konqueror Search vendor "Kde" for product "Konqueror"				3.2.2.6 Search vendor "Kde" for product "Konqueror" and version "3.2.2.6"		-		Affected
Kde Search vendor "Kde"		Konqueror Search vendor "Kde" for product "Konqueror"				3.2.3 Search vendor "Kde" for product "Konqueror" and version "3.2.3"		-		Affected
Kde Search vendor "Kde"		Konqueror Search vendor "Kde" for product "Konqueror"				3.3 Search vendor "Kde" for product "Konqueror" and version "3.3"		-		Affected
Kde Search vendor "Kde"		Konqueror Search vendor "Kde" for product "Konqueror"				3.3.1 Search vendor "Kde" for product "Konqueror" and version "3.3.1"		-		Affected
Kde Search vendor "Kde"		Konqueror Search vendor "Kde" for product "Konqueror"				3.3.2 Search vendor "Kde" for product "Konqueror" and version "3.3.2"		-		Affected