PT-2007-2723 · Kde+1 · Kde Konqueror+1

Published 2007-03-07 · Updated 2018-10-16 · CVE-2007-1308

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions KDE Konqueror version 3.5.5

Description The issue allows remote attackers to cause a denial of service, resulting in a crash, by accessing the content of an iframe with an ftp:// URI in the src attribute, likely due to a NULL pointer dereference.

Recommendations For KDE Konqueror version 3.5.5, consider avoiding the use of iframes with ftp:// URIs in the src attribute until a fix is available. As a temporary workaround, restrict access to iframes with external sources to minimize the risk of exploitation.

Exploit

Fix

DoS

Weakness Enumeration

CWE-399

Related Identifiers

CVE-2007-1308

RHSA-2007:0909

RHSA-2007_0909

Affected Products

Kde Konqueror

Red Hat

References · 32

• 🔥 https://exploit-db.com/exploits/29713 · Exploit
• 🔥 http://lists.grok.org.uk/pipermail/full-disclosure/2007-March/052793.html · Exploit
• 🔥 http://securityfocus.com/bid/22814 · Exploit
• 🔥 http://bindshell.net/advisories/konq355 · Exploit
• https://bdu.fstec.ru/vul/2015-02906 · Security Note
• https://bdu.fstec.ru/vul/2015-06493 · Security Note
• https://bdu.fstec.ru/vul/2015-06486 · Security Note
• https://bdu.fstec.ru/vul/2015-06492 · Security Note
• https://bdu.fstec.ru/vul/2015-06488 · Security Note
• http://mandriva.com/security/advisories?name=MDKSA-2007:054 · Vendor Advisory
• http://secunia.com/advisories/27108 · Vendor Advisory
• http://ubuntu.com/usn/usn-447-1 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-06491 · Security Note
• http://redhat.com/support/errata/RHSA-2007-0909.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-06487 · Security Note