rendering/render_replaced.cpp in Konqueror in KDE before 4.9.3 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted web page, related to "trying to reuse a frame with a null part."
https://bugs.kde.org/show_bug.cgi?id=271528
http://www.openwall.com/lists/oss-security/2012/10/30/6
http://www.openwall.com/lists/oss-security/2012/10/11/11
http://archives.neohapsis.com/archives/bugtraq/2012-11/0005.html