1. CVE-Search
  2. CVE-2006-3672
ID CVE-2006-3672
Summary KDE Konqueror 3.5.1 and earlier allows remote attackers to cause a denial of service (application crash) by calling the replaceChild method on a DOM object, which triggers a null dereference, as demonstrated by calling document.replaceChild with a 0 (zero) argument.
References
Vulnerable Configurations
  • cpe:2.3:a:kde:konqueror:2.1.1:*:*:*:*:*:*:*
    cpe:2.3:a:kde:konqueror:2.1.1:*:*:*:*:*:*:*
  • cpe:2.3:a:kde:konqueror:2.1.2:*:*:*:*:*:*:*
    cpe:2.3:a:kde:konqueror:2.1.2:*:*:*:*:*:*:*
  • cpe:2.3:a:kde:konqueror:2.2.1:*:*:*:*:*:*:*
    cpe:2.3:a:kde:konqueror:2.2.1:*:*:*:*:*:*:*
  • cpe:2.3:a:kde:konqueror:2.2.2:*:*:*:*:*:*:*
    cpe:2.3:a:kde:konqueror:2.2.2:*:*:*:*:*:*:*
  • cpe:2.3:a:kde:konqueror:3.0:*:*:*:*:*:*:*
    cpe:2.3:a:kde:konqueror:3.0:*:*:*:*:*:*:*
  • cpe:2.3:a:kde:konqueror:3.0.1:*:*:*:*:*:*:*
    cpe:2.3:a:kde:konqueror:3.0.1:*:*:*:*:*:*:*
  • cpe:2.3:a:kde:konqueror:3.0.2:*:*:*:*:*:*:*
    cpe:2.3:a:kde:konqueror:3.0.2:*:*:*:*:*:*:*
  • cpe:2.3:a:kde:konqueror:3.0.3:*:*:*:*:*:*:*
    cpe:2.3:a:kde:konqueror:3.0.3:*:*:*:*:*:*:*
  • cpe:2.3:a:kde:konqueror:3.0.5:*:*:*:*:*:*:*
    cpe:2.3:a:kde:konqueror:3.0.5:*:*:*:*:*:*:*
  • cpe:2.3:a:kde:konqueror:3.0.5b:*:*:*:*:*:*:*
    cpe:2.3:a:kde:konqueror:3.0.5b:*:*:*:*:*:*:*
  • cpe:2.3:a:kde:konqueror:3.1:*:*:*:*:*:*:*
    cpe:2.3:a:kde:konqueror:3.1:*:*:*:*:*:*:*
  • cpe:2.3:a:kde:konqueror:3.1.1:*:*:*:*:*:*:*
    cpe:2.3:a:kde:konqueror:3.1.1:*:*:*:*:*:*:*
  • cpe:2.3:a:kde:konqueror:3.1.2:*:*:*:*:*:*:*
    cpe:2.3:a:kde:konqueror:3.1.2:*:*:*:*:*:*:*
  • cpe:2.3:a:kde:konqueror:3.1.3:*:*:*:*:*:*:*
    cpe:2.3:a:kde:konqueror:3.1.3:*:*:*:*:*:*:*
  • cpe:2.3:a:kde:konqueror:3.1.4:*:*:*:*:*:*:*
    cpe:2.3:a:kde:konqueror:3.1.4:*:*:*:*:*:*:*
  • cpe:2.3:a:kde:konqueror:3.1.5:*:*:*:*:*:*:*
    cpe:2.3:a:kde:konqueror:3.1.5:*:*:*:*:*:*:*
  • cpe:2.3:a:kde:konqueror:3.2.1:*:*:*:*:*:*:*
    cpe:2.3:a:kde:konqueror:3.2.1:*:*:*:*:*:*:*
  • cpe:2.3:a:kde:konqueror:3.2.2:*:*:*:*:*:*:*
    cpe:2.3:a:kde:konqueror:3.2.2:*:*:*:*:*:*:*
  • cpe:2.3:a:kde:konqueror:3.2.2.6:*:*:*:*:*:*:*
    cpe:2.3:a:kde:konqueror:3.2.2.6:*:*:*:*:*:*:*
  • cpe:2.3:a:kde:konqueror:3.2.3:*:*:*:*:*:*:*
    cpe:2.3:a:kde:konqueror:3.2.3:*:*:*:*:*:*:*
  • cpe:2.3:a:kde:konqueror:3.3:*:*:*:*:*:*:*
    cpe:2.3:a:kde:konqueror:3.3:*:*:*:*:*:*:*
  • cpe:2.3:a:kde:konqueror:3.3.1:*:*:*:*:*:*:*
    cpe:2.3:a:kde:konqueror:3.3.1:*:*:*:*:*:*:*
  • cpe:2.3:a:kde:konqueror:3.3.2:*:*:*:*:*:*:*
    cpe:2.3:a:kde:konqueror:3.3.2:*:*:*:*:*:*:*
  • cpe:2.3:a:kde:konqueror:*:*:*:*:*:*:*:*
    cpe:2.3:a:kde:konqueror:*:*:*:*:*:*:*:*
CVSS
Base: 2.6 (as of 20-07-2017 - 01:32)
Impact:
Exploitability:
CWE NVD-CWE-Other
CAPEC
Access
VectorComplexityAuthentication
NETWORK HIGH NONE
Impact
ConfidentialityIntegrityAvailability
NONE NONE PARTIAL
cvss-vector via4 AV:N/AC:H/Au:N/C:N/I:N/A:P
refmap via4
bid 18978
mandriva MDKSA-2006:130
misc http://browserfun.blogspot.com/2006/07/mobb-14-konqueror-replacechild.html
osvdb 27058
ubuntu USN-322-1
vupen ADV-2006-2812
xf konqueror-replacechild-dos(27744)
statements via4
contributor Mark J Cox
lastmodified 2006-08-30
organization Red Hat
statement We do not consider a crash of a client application such as Konqueror to be a security issue.
Last major update 20-07-2017 - 01:32
Published 18-07-2006 - 15:47
Last modified 20-07-2017 - 01:32
Back to Top