CVE		CVE-2007-1308
Статус		Candidate
Описание		ecma/kjs_html.cpp in KDE JavaScript (KJS), as used in Konqueror in KDE 3.5.5, allows remote attackers to cause a denial of service (crash) by accessing the content of an iframe with an ftp:// URI in the src attribute, probably due to a NULL pointer dereference.
Важность		Low
CVSS score		1,9
CVSS vector		(AV:R/AC:H/Au:NR/C:N/I:N/A:P/B:N)
Phase		Assigned (06.03.2007)
NVD:		http://nvd.nist.gov/nvd.cfm?cvename=CVE-2007-1308
References		BID : 22814
		BUGTRAQ : 20070304 Konqueror DoS Via JavaScript Read Of FTP Iframe
		FRSIRT : ADV-2007-0886
		FULLDISC : 20070304 Konqueror DoS Via JavaScript Read Of FTP Iframe
		MANDRIVA : MDKSA-2007:054
		MISC : http://bindshell.net/advisories/konq355
		MISC : http://bindshell.net/advisories/konq355/konq355-pa...
		UBUNTU : USN-447-1
		XF : konqueror-ftp-dos(32798)
SecurityVulns:		Атака FTP bounce против FTP-клиентов