CVE-2007-4225

Visual truncation vulnerability in KDE Konqueror 3.5.7 allows remote attackers to spoof the URL address bar via an http URI with a large amount of whitespace in the user/password portion...

CVE-2007-4224

KDE Konqueror 3.5.7 allows remote attackers to spoof the URL address bar by calling setInterval with a small interval and changing the window.location property...

CVE-2007-4224

CVE-2007-4224 affects KDE Konqueror 3.5.7, describing a remote-address-bar spoof in which an attacker can spoof the URL by calling setInterval with a short interval and changing window.location. The vulnerability targets Konqueror’s handling of the address bar and is documented alongside related ...

CVE-2007-4225

CVE-2007-4225 affects KDE Konqueror 3.5.7. It is a visual truncation vulnerability that lets remote attackers spoof the URL address bar using an http URI with excessive whitespace in the user/password portion. CVSS data indicates network access, no authentication, and partial impact on confidenti...

KDE Konqueror address bar spoofing

There are few possibilities for address bar spoofing...

Konqueror: URL address bar spoofing vulnerabilities

There are vulnerabilities in Konqueror that allow an attacker to spoof the URL adddress bar. The first example uses setInterval call with relatively small interval value e.g. 0 to change window.location property. A browser is entrapped within the attacking web site while the user thinks that...

KDE Konqueror DoS

Crash on invalid sequences of open and close HTML tags...

[BuHa-Security] DoS Vulnerability in Konqueror 3.5.7

-----BEGIN PGP SIGNED MESSAGE----- Hash: RIPEMD160 --------------------------------------------------- | BuHa Security-Advisory 16 | Aug 01st, 2007 | --------------------------------------------------- | Vendor | KDE's Konqueror | | URL | http://www.konqueror.org/ | | Version | = 3.5.7 | | Risk |...

CVE-2007-3820

konqueror/konqcombo.cc in Konqueror 3.5.7 allows remote attackers to spoof the data: URI scheme in the address bar via a long URI with trailing whitespace, which prevents the beginning of the URI from being displayed...

CVE-2007-3820

konqueror/konqcombo.cc in Konqueror 3.5.7 allows remote attackers to spoof the data: URI scheme in the address bar via a long URI with trailing whitespace, which prevents the beginning of the URI from being displayed...

Code injection

konqueror/konqcombo.cc in Konqueror 3.5.7 allows remote attackers to spoof the data: URI scheme in the address bar via a long URI with trailing whitespace, which prevents the beginning of the URI from being displayed...

CVE-2007-3820

konqueror/konqcombo.cc in Konqueror 3.5.7 allows remote attackers to spoof the data: URI scheme in the address bar via a long URI with trailing whitespace, which prevents the beginning of the URI from being displayed...

CVE-2007-3820

CVE-2007-3820 affects Konqueror (Konqueror 3.5.7) via konq_combo.cc: remote attacker can spoof the data: URI in the address bar by sending a long URI with trailing whitespace, causing the start of the URI to be hidden. This is a Konqueror/address-bar spoofing flaw. Public advisories exist (e.g., ...

Flash Player information disclosure vulnerability

Overview The Adobe Flash player contains an information disclosure vulnerability that affects the Konqueror and Opera web browsers. Description Konqueror is the default web browser for the KDE desktop. Opera is a web browser that is available for Windows, Linux and BSD systems.The Adobe Flash...

Mandrake Linux Security Advisory : kdebase (MDKSA-2007:138)

An issue with the interaction between the Flash Player and the Konqueror web browser was discovered, which could lead to key presses leaking to the Flash Player instead of to the browser. This only affects users who have actually installed the Adobe Flash Player plugin. Updated packages have been...

CentOS 3 / 4 / 5 : kdebase (CESA-2007:0494)

Updated kdebase packages that resolve an interaction security issue with Adobe Flash Player are now available. This update has been rated as having important security impact by the Red Hat Security Response Team. The kdebase packages provide the core applications for KDE, the K Desktop Environmen...

RHEL 3 / 4 / 5 : kdebase (RHSA-2007:0494)

Updated kdebase packages that resolve an interaction security issue with Adobe Flash Player are now available. This update has been rated as having important security impact by the Red Hat Security Response Team. The kdebase packages provide the core applications for KDE, the K Desktop Environmen...

kdebase security update

CentOS Errata and Security Advisory CESA-2007:0494 Updated kdebase packages that resolve an interaction security issue with Adobe Flash Player are now available. This update has been rated as having important security impact by the Red Hat Security Response Team. The kdebase packages provide the...

kdebase3 flash-player interaction problem

Adobe Macromedia Flash Player 7 and 9, when used with Opera before 9.20 or Konqueror before 20070613, allows remote attackers to obtain sensitive information browser keystrokes, which are leaked to the Flash Player applet...

Important: Red Hat Security Advisory: kdebase security update

Updated kdebase packages that resolve an interaction security issue with Adobe Flash Player are now available. This update has been rated as having important security impact by the Red Hat Security Response Team. The kdebase packages provide the core applications for KDE, the K Desktop Environmen...