CVE-2006-3672

KDE Konqueror 3.5.1 and earlier allows remote attackers to cause a denial of service (application crash) by calling the replaceChild method on a DOM object, which triggers a null dereference, as demonstrated by calling document.replaceChild with a 0 (zero) argument.

Affected Software

Name	Vendor	Start Version	End Version
Konqueror	Kde	*	3.5.1 (including)
Konqueror	Kde	2.1.1 (including)	2.1.1 (including)
Konqueror	Kde	2.1.2 (including)	2.1.2 (including)
Konqueror	Kde	2.2.1 (including)	2.2.1 (including)
Konqueror	Kde	2.2.2 (including)	2.2.2 (including)
Konqueror	Kde	3.0 (including)	3.0 (including)
Konqueror	Kde	3.0.1 (including)	3.0.1 (including)
Konqueror	Kde	3.0.2 (including)	3.0.2 (including)
Konqueror	Kde	3.0.3 (including)	3.0.3 (including)
Konqueror	Kde	3.0.5 (including)	3.0.5 (including)
Konqueror	Kde	3.0.5b (including)	3.0.5b (including)
Konqueror	Kde	3.1 (including)	3.1 (including)
Konqueror	Kde	3.1.1 (including)	3.1.1 (including)
Konqueror	Kde	3.1.2 (including)	3.1.2 (including)
Konqueror	Kde	3.1.3 (including)	3.1.3 (including)
Konqueror	Kde	3.1.4 (including)	3.1.4 (including)
Konqueror	Kde	3.1.5 (including)	3.1.5 (including)
Konqueror	Kde	3.2.1 (including)	3.2.1 (including)
Konqueror	Kde	3.2.2 (including)	3.2.2 (including)
Konqueror	Kde	3.2.2.6 (including)	3.2.2.6 (including)
Konqueror	Kde	3.2.3 (including)	3.2.3 (including)
Konqueror	Kde	3.3 (including)	3.3 (including)
Konqueror	Kde	3.3.1 (including)	3.3.1 (including)
Konqueror	Kde	3.3.2 (including)	3.3.2 (including)
Kdelibs	Ubuntu	dapper	*
Kdelibs	Ubuntu	devel	*
Kdelibs	Ubuntu	edgy	*
Kdelibs	Ubuntu	feisty	*

NVD	https://nvd.nist.gov/vuln/detail/CVE-2006-3672
CWE	https://cwe.mitre.org/data/definitions/NVD-Other.html

Affected Software

References