CVE-2008-5698: Kde Konqueror

Medium severity, CVSS 4.3. EPSS: 3.5% chance of exploitation in the next 30 days.

HTMLTokenizer::scriptHandler in Konqueror in KDE 3.5.9 and 3.5.10 allows remote attackers to cause a denial of service (application crash) via an invalid document.load call that triggers use of a deleted object. NOTE: some of these details are obtained from third party information.

Affected products

• Kde Konqueror: any version

Published 2008-12-22. Last modified 2026-06-16.