HTMLTokenizer::scriptHandler in Konqueror in KDE 3.5.9 and 3.5.10 allows remote attackers to cause a denial of service (application crash) via an invalid document.load call that triggers use of a deleted object. NOTE: some of these details are obtained from third party information.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Kde | Kde | 3.5.9 (including) | 3.5.9 (including) |
| Kde | Kde | 3.5.10 (including) | 3.5.10 (including) |