Mandriva Linux Security Advisory MDKSA-2006-130 – KDE Konqueror 3.5.1 and earlier allows remote attackers to cause a denial of service (application crash) by calling the replaceChild method on a DOM object, which triggers a null dereference, as demonstrated by calling document.replaceChild with a 0 (zero) argument.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/48459/MDKSA-2006-130.txt
Source: https://packetstormsecurity.com/files/48459/Mandriva-Linux-Security-Advisory-2006.130.html