PT-2007-6927 · Kde · Kde Konqueror

Published 2007-11-15 · Updated 2018-10-15 · CVE-2007-6000

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions KDE Konqueror versions 3.5.6 and earlier

Description The issue allows remote attackers to cause a denial of service, resulting in a crash, by sending large HTTP cookie parameters.

Recommendations For versions 3.5.6 and earlier, consider restricting the size of HTTP cookie parameters to prevent the denial of service. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Weakness Enumeration

CWE-399

Related Identifiers

CVE-2007-6000

Affected Products

Kde Konqueror

References · 6

• 🔥 https://exploit-db.com/exploits/30763 · Exploit
• 🔥 http://securityfocus.com/bid/26435 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2007-6000 · Security Note
• http://securityfocus.com/archive/1/483705/100/0/threaded · Note
• http://securityreason.com/securityalert/3370 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/38456 · Note