CVE-2006-3672: Kde Konqueror

Low severity, CVSS 2.6. EPSS: 6.9% chance of exploitation in the next 30 days.

KDE Konqueror 3.5.1 and earlier allows remote attackers to cause a denial of service (application crash) by calling the replaceChild method on a DOM object, which triggers a null dereference, as demonstrated by calling document.replaceChild with a 0 (zero) argument.

Affected products

• Kde Konqueror: up to and including 3.5.1; version 2.1.1 only; version 2.1.2 only; version 2.2.1 only; version 2.2.2 only; version 3.0 only; …

Published 2006-07-18. Last modified 2026-06-16.