CVE-2003-1478

Description

Konqueror in KDE 3.0.3 allows remote attackers to cause a denial of service (core dump) via a web page that begins with a "xFFxFE" byte sequence and a large number of CRLF sequences, as demonstrated using freeze.htm.

Affected products

• KDE / Konqueror3.0.3 – 3.0.3

Exploits & proofs of concept

• exploit-dbKDE Konqueror 3.0.3 - Malformed HTML Page Denial of Serviceby Joachim_Strombergson

References

• MISChttp://www.securityfocus.com/bid/7486
• MISChttps://exchange.xforce.ibmcloud.com/vulnerabilities/11971
• MISChttp://www.securityfocus.com/archive/1/320266