762 matches found
Spoofing of URI possible in Konqueror's address bar
konqueror/konqcombo.cc in Konqueror 3.5.7 allows remote attackers to spoof the data: URI scheme in the address bar via a long URI with trailing whitespace, which prevents the beginning of the URI from being displayed...
URL spoof in address bar
KDE Konqueror 3.5.7 allows remote attackers to spoof the URL address bar by calling setInterval with a small interval and changing the window.location property...
Spoofing of URI possible in Konqueror's address bar
konqueror/konqcombo.cc in Konqueror 3.5.7 allows remote attackers to spoof the data: URI scheme in the address bar via a long URI with trailing whitespace, which prevents the beginning of the URI from being displayed...
Moderate: kdebase security update
3.3.1-6.el4.0.1 - turn off ' 3.3.1-6.l4 - Resolves: 290851, CVE-2007-4569, kdm password-less login vulnerability CVE-2007-3820, CVE-2007-4224 CVE-2007-4225, Konqueror address bar spoofin...
[SECURITY] Fedora 7 Update: kdebase-3.5.7-13.1.fc7
Core applications for the K Desktop Environment. Included are: kdm replacement for xdm, kwin window manager, konqueror filemanager, web browser, ftp client, ..., konsole xterm replacement, kpanel application starter and desktop pager, kaudio audio server, kdehelp viewer for kde help files, info a...
Slackware 12.0 : kdebase, kdelibs (SSA:2007-264-01)
New kdebase packages are available for Slackware 12.0 to fix security issues. A long URL padded with spaces could be used to display a false URL in Konqueror's addressbar, and KDM when used with no-password login could be tricked into logging a different user in without a password. This is not th...
[slackware-security] kdebase, kdelibs
New kdebase packages are available for Slackware 12.0 to fix security issues. A long URL padded with spaces could be used to display a false URL in Konqueror's addressbar, and KDM when used with no-password login could be tricked into logging a different user in without a password. This is not th...
Mandrake Linux Security Advisory : konqueror (MDKSA-2007:176)
konqueror/konqcombo.cc in Konqueror 3.5.7 allows remote attackers to spoof the data: URI scheme in the address bar via a long URI with trailing whitespace, which prevents the beginning of the URI from being displayed. CVE-2007-3820 KDE Konqueror 3.5.7 allows remote attackers to spoof the URL...
USN-502-1: KDE vulnerabilities
It was discovered that Konqueror could be tricked into displaying incorrect URLs. Remote attackers could exploit this to increase their chances of tricking a user into visiting a phishing URL, which could lead to credential theft...
[SECURITY] Fedora 7 Update: kdebase-3.5.7-13.fc7
Core applications for the K Desktop Environment. Included are: kdm replacement for xdm, kwin window manager, konqueror filemanager, web browser, ftp client, ..., konsole xterm replacement, kpanel application starter and desktop pager, kaudio audio server, kdehelp viewer for kde help files, info a...
KDE Konqueror SetInterval函数地址栏URI伪造漏洞
Konqueror是一款多功能的浏览器，允许浏览本地和网络文件系统和全功能的WWW浏览器。 Konqueror不正确过滤用户输入，远程攻击者可以利用漏洞进行URI伪造攻击，获得目标用户敏感信息。 使用较小的间隔值如0使用调用setInterval来更改window.location属性，攻击者可以构建恶意WEB页在地址栏中显示可信URL而内容为任意内容，导致诱使用户信任内容而泄露敏感信息。 KDE Konqueror 3.5.7 KDE Konqueror 3.5.5 目前没有解决方案提供： http://www.konqueror.org/ 可参考如下测试页面：...
Design/Logic Flaw
Unspecified vulnerability in KDE Konqueror 3.5.7 and earlier allows remote attackers to cause a denial of service failed assertion and application crash via certain malformed HTML, as demonstrated by a document containing TEXTAREA, BUTTON, BR, BDO, PRE, FRAMESET, and A tags. NOTE: the provenance ...
CVE-2007-4229
Unspecified vulnerability in KDE Konqueror 3.5.7 and earlier allows remote attackers to cause a denial of service failed assertion and application crash via certain malformed HTML, as demonstrated by a document containing TEXTAREA, BUTTON, BR, BDO, PRE, FRAMESET, and A tags. NOTE: the provenance ...
CVE-2007-4229
Unspecified vulnerability in KDE Konqueror 3.5.7 and earlier allows remote attackers to cause a denial of service failed assertion and application crash via certain malformed HTML, as demonstrated by a document containing TEXTAREA, BUTTON, BR, BDO, PRE, FRAMESET, and A tags. NOTE: the provenance ...
CVE-2007-4229
CVE-2007-4229 affects KDE Konqueror 3.5.7 and earlier. The vulnerability allows remote attackers to cause a denial of service (failed assertion and application crash) via certain malformed HTML, demonstrated by documents containing TEXTAREA, BUTTON, BR, BDO, PRE, FRAMESET, and A tags. Root cause ...
CVE-2007-4229
Unspecified vulnerability in KDE Konqueror 3.5.7 and earlier allows remote attackers to cause a denial of service failed assertion and application crash via certain malformed HTML, as demonstrated by a document containing TEXTAREA, BUTTON, BR, BDO, PRE, FRAMESET, and A tags. NOTE: the provenance ...
CVE-2007-4224
KDE Konqueror 3.5.7 allows remote attackers to spoof the URL address bar by calling setInterval with a small interval and changing the window.location property...
CVE-2007-4225
Visual truncation vulnerability in KDE Konqueror 3.5.7 allows remote attackers to spoof the URL address bar via an http URI with a large amount of whitespace in the user/password portion...