CVE-2008-5712

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 3.8% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2008-12-24 · updated 2026-06-16
Weakness: CWE-20

Description

The HTML parser in KDE Konqueror 3.5.9 allows remote attackers to cause a denial of service (application crash) via (1) a long COLOR attribute in an HR element; or a long (a) BGCOLOR or (b) BORDERCOLOR attribute in a (2) TABLE, (3) TD, or (4) TR element. NOTE: the FONT vector is already covered by CVE-2008-4514.

Affected products

KDE Konqueror: 3.5.9

References

http://securityreason.com/securityalert/4806
https://exchange.xforce.ibmcloud.com/vulnerabilities/47696
https://www.exploit-db.com/exploits/6704
http://securityreason.com/securityalert/4806
https://exchange.xforce.ibmcloud.com/vulnerabilities/47696
https://www.exploit-db.com/exploits/6704

Get alerted when CVE-2008-5712 or the next vulnerability affects your stack