Description
Konqueror 3.5.5 release 45.4 allows remote attackers to cause a denial of service (browser crash or abort) via JavaScript that matches a regular expression against a long string, as demonstrated using /(.)*/.
References
- 20070417 Re: Internet Explorer Crash mailing-list
- 2600 third-party-advisory
- 20070417 Internet Explorer Crash mailing-list