PT-2004-1639 · Kde · Kde Konqueror

Publicado 2004-06-08 · Atualizado 2017-07-11 · CVE-2004-0527

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions KDE Konqueror versions 2.1.1 through 2.2.2

Description The issue allows remote attackers to spoof a legitimate URL in the status bar, facilitating a phishing attack. This is achieved by using A HREF tags with modified alt values that point to the legitimate site, combined with an image map whose href points to the malicious site.

Recommendations For KDE Konqueror versions 2.1.1 through 2.2.2, consider disabling the use of image maps and modified alt values in A HREF tags as a temporary workaround until a patch is available. Restrict access to untrusted websites to minimize the risk of exploitation.

Exploit

Correção

Identificadores relacionados

CVE-2004-0527

Produtos afetados

Kde Konqueror

Referências · 5

• 🔥 https://exploit-db.com/exploits/24136 · Exploit
• 🔥 http://securityfocus.com/bid/10383 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2004-0527 · Nota de Segurança
• http://osvdb.org/6579 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/16102 · Nota