PT-2007-5417 · Kde+1 · Kde Konqueror+1

Published 2007-08-08 · Updated 2018-10-15 · CVE-2007-4224

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions KDE Konqueror version 3.5.7

Description The issue allows remote attackers to spoof the URL address bar. This is achieved by calling setInterval with a small interval and changing the window.location property.

Recommendations For KDE Konqueror version 3.5.7, consider disabling the setInterval function or restricting changes to the window.location property as a temporary workaround until a patch is available.

Fix

Link Following

Weakness Enumeration

CWE-59

Related Identifiers

CVE-2007-4224

RHSA-2007:0905

RHSA-2007:0909

RHSA-2007_0905

RHSA-2007_0909

Affected Products

Kde Konqueror

Red Hat

References · 54

• https://bdu.fstec.ru/vul/2015-02906 · Security Note
• https://redhat.com/archives/fedora-package-announce/2007-October/msg00022.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-06492 · Security Note
• https://bdu.fstec.ru/vul/2015-06488 · Security Note
• https://bdu.fstec.ru/vul/2015-09598 · Security Note
• https://bdu.fstec.ru/vul/2015-06487 · Security Note
• https://bdu.fstec.ru/vul/2015-06489 · Security Note
• https://bdu.fstec.ru/vul/2015-06490 · Security Note
• https://bdu.fstec.ru/vul/2015-06486 · Security Note
• https://bdu.fstec.ru/vul/2015-06493 · Security Note
• https://redhat.com/archives/fedora-package-announce/2007-October/msg00085.html · Vendor Advisory
• http://mandriva.com/security/advisories?name=MDKSA-2007:176 · Vendor Advisory
• http://redhat.com/support/errata/RHSA-2007-0909.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-06491 · Security Note
• http://lists.opensuse.org/opensuse-security-announce/2007-10/msg00006.html · Vendor Advisory