CVE-2006-6660
KDE libkhtml < 4.2.0 - Denial of Service via Malformed HTML Tags
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2006-6660. PoCs published by Federico L. Bossi Bonin.
AI-analyzed exploit summary This exploit leverages a denial-of-service vulnerability in KDE libkhtml by convincing a victim to open a malicious HTML document. The malformed HTML tags trigger a crash in applications like Konqueror or kmail.
Description
The nodeType function in KDE libkhtml 4.2.0 and earlier, as used by Konquerer, KMail, and other programs, allows remote attackers to cause a denial of service (crash) via malformed HTML tags, possibly involving a COL SPAN tag embedded in a RANGE tag.
Exploits (2)
This exploit leverages a denial-of-service vulnerability in KDE libkhtml by convincing a victim to open a malicious HTML document. The malformed HTML tags trigger a crash in applications like Konqueror or kmail.
This exploit triggers a segmentation fault in KDE's libkhtml (version <= 4.2.0) by providing malformed HTML tags, leading to a denial-of-service (DoS) condition. The crash occurs due to unhandled parsing exceptions in the DOM::Node::nodeType function.