rendering/render_replaced.cpp in Konqueror in KDE before 4.9.3 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted web page, related to "trying to reuse a frame with a null part."
https://euvd.enisa.europa.eu/vulnerability/EUVD-2012-4443
https://bugs.kde.org/show_bug.cgi?id=271528
http://www.openwall.com/lists/oss-security/2012/10/30/6
http://www.openwall.com/lists/oss-security/2012/10/11/11
http://www.nth-dimension.org.uk/pub/NDSA20121010.txt.asc
http://archives.neohapsis.com/archives/bugtraq/2012-11/0005.html