Public exploit available
Public proof-of-concept or exploit code exists (ExploitDB / Metasploit / Nuclei).

CVE-2008-5712

CWE-20 — Improper Input Validation6 documents5 sources
Severity
5.0MEDIUM
EPSS
4.5%
top 10.85%
CISA KEV
Not in KEV
Exploit
PoC available
Public exploit / PoC exists
Affected products
1
KDE Konqueror
Timeline
PublishedDec 24
Latest updateMay 17

Description

The HTML parser in KDE Konqueror 3.5.9 allows remote attackers to cause a denial of service (application crash) via (1) a long COLOR attribute in an HR element; or a long (a) BGCOLOR or (b) BORDERCOLOR attribute in a (2) TABLE, (3) TD, or (4) TR element. NOTE: the FONT vector is already covered by CVE-2008-4514.

CVSS vector

AV:N/AC:L/C:N/I:N/A:PExploitability: 10.0 | Impact: 2.9

Affected Packages1 packages

▶NVDkde/konqueror3.5.9

🔴Vulnerability Details

2
GHSA
GHSA-h8jh-g7wj-qxjv: The HTML parser in KDE Konqueror 3↗2022-05-17
▶
CVEList
CVE-2008-5712: The HTML parser in KDE Konqueror 3↗2008-12-24
▶

💥Exploits & PoCs

2
Exploit-DB
Konqueror 3.5.9 - 'color'/'bgcolor' Multiple Remote Crash Vulnerabilities↗2008-10-08
▶
Exploit-DB
Konqueror 3.5.9 - 'font color' Remote Crash↗2008-10-06
▶

📋Vendor Advisories

1
Red Hat
CVE-2008-5712: The HTML parser in KDE Konqueror 3↗
▶