Lucene search
HistoryJun 11, 2007 - 6:30 p.m.
CVE-2007-3143
cve-2007-3143
konqueror 3.5.5
visual truncation vulnerability
remote attackers
address bar spoofing
phishing attacks
http basic authentication
6.6 Medium
AI Score
Confidence
Low
6.4 Medium
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:P/A:N
0.01 Low
EPSS
Percentile
83.4%
Visual truncation vulnerability in Konqueror 3.5.5 allows remote attackers to spoof the address bar and possibly conduct phishing attacks via a long hostname, which is truncated after a certain number of characters, as demonstrated by a phishing attack using HTTP Basic Authentication.
Affected configurations
Node
kdekonquerorMatch3.5.5
| CPE | Name | Operator | Version |
|---|---|---|---|
| kde:konqueror | kde konqueror | eq | 3.5.5 |
Related
nvd
nvd
CVE-2007-3143
2007-06-11 18:30:00
prion
prion
Design/Logic Flaw
2007-06-11 18:30:00
cvelist
cvelist
CVE-2007-3143
2007-06-11 18:00:00
ubuntucve
ubuntucve
CVE-2007-3143
2007-06-11 00:00:00
6.6 Medium
AI Score
Confidence
Low
6.4 Medium
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:P/A:N
0.01 Low
EPSS
Percentile
83.4%
Related for CVE-2007-3143