The HTML parser in KDE Konqueror 3.5.9 allows remote attackers to cause a denial of service (application crash) via a font tag with a long color value, which triggers an assertion error.
https://www.exploit-db.com/exploits/6689
https://euvd.enisa.europa.eu/vulnerability/EUVD-2008-4495