PT-2007-5417 · Kde+1 · Kde Konqueror+1

Publicado 2007-08-08 · Atualizado 2018-10-15 · CVE-2007-4224

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions KDE Konqueror version 3.5.7

Description The issue allows remote attackers to spoof the URL address bar. This is achieved by calling setInterval with a small interval and changing the window.location property.

Recommendations For KDE Konqueror version 3.5.7, consider disabling the setInterval function or restricting changes to the window.location property as a temporary workaround until a patch is available.

Correção

Link Following

Enumeração de Fraquezas

CWE-59

Identificadores relacionados

CVE-2007-4224

RHSA-2007:0905

RHSA-2007:0909

RHSA-2007_0905

RHSA-2007_0909

Produtos afetados

Kde Konqueror

Red Hat

Referências · 54

• http://secunia.com/advisories/26720 · Nota
• https://bdu.fstec.ru/vul/2015-02906 · Nota de Segurança
• https://redhat.com/archives/fedora-package-announce/2007-October/msg00022.html · Aviso do Fabricante
• http://kde.org/info/security/advisory-20070816-1.txt · Nota
• http://lists.grok.org.uk/pipermail/full-disclosure/2007-March/052793.html · Nota
• http://securityfocus.com/archive/1/475730/100/0/threaded · Nota
• http://securityfocus.com/bid/25219 · Nota
• http://secunia.com/advisories/27108 · Nota
• https://access.redhat.com/security/cve/CVE-2007-1308 · Nota
• http://securityreason.com/securityalert/2982 · Nota
• https://bdu.fstec.ru/vul/2015-06492 · Nota de Segurança
• https://bdu.fstec.ru/vul/2015-06488 · Nota de Segurança
• http://lists.grok.org.uk/pipermail/full-disclosure/2007-August/065101.html · Nota
• https://bdu.fstec.ru/vul/2015-09598 · Nota de Segurança
• http://secunia.com/advisories/26690 · Nota