----------------------------------------------------------------------

Do you need accurate and reliable IDS / IPS / AV detection rules?

Get in-depth vulnerability details:
http://secunia.com/binary_analysis/sample_analysis/

----------------------------------------------------------------------

TITLE:
KDE KHTML "HTMLTokenizer::scriptHandler()" Recursive Document Load
Weakness

SECUNIA ADVISORY ID:
SA32208

VERIFY ADVISORY:
http://secunia.com/advisories/32208/

CRITICAL:
Not critical

IMPACT:
DoS

WHERE:
>From remote

SOFTWARE:
KDE 3.x
http://secunia.com/advisories/product/219/

DESCRIPTION:
Jeremy Brown has discovered a weakness in KDE, which can be exploited
by malicious people to cause a DoS (Denial of Service).

The weakness is caused due to KHTML improperly handling JavaScript
"document.load()" calls targeting the current document. This can be
exploited to trigger the use of a deleted object within the
"HTMLTokenizer::scriptHandler()" method and cause a crash.

The weakness is confirmed with Konqueror using KHTML from KDE
versions 3.5.9 and 3.5.10. Other versions may also be affected.

NOTE: Secunia normally does not classify a browser crash as a
vulnerability nor issue an advisory about it. However, the potential
impact of this issue may be more severe than currently believed.

SOLUTION:
Do not open untrusted HTML documents with applications using KHTML
(e.g. Konqueror).

PROVIDED AND/OR DISCOVERED BY:
Jeremy Brown

ORIGINAL ADVISORY:
http://milw0rm.com/exploits/6718

----------------------------------------------------------------------

About:
This Advisory was delivered by Secunia as a free service to help
everybody keeping their systems up to date against the latest
vulnerabilities.

Subscribe:
http://secunia.com/advisories/secunia_security_advisories/

Definitions: (Criticality, Where etc.)
http://secunia.com/advisories/about_secunia_advisories/


Please Note:
Secunia recommends that you verify all advisories you receive by
clicking the link.
Secunia NEVER sends attached files with advisories.
Secunia does not advise people to install third party patches, only
use those supplied by the vendor.

----------------------------------------------------------------------