CVE-2007-3820

Related Files

Mandriva Linux Security Advisory 2007.176

Posted Sep 7, 2007

Authored by Mandriva | Site mandriva.com

Mandriva Linux Security Advisory - konqueror/konq_combo.cc in Konqueror 3.5.7 allows remote attackers to spoof the data: URI scheme in the address bar via a long URI with trailing whitespace, which prevents the beginning of the URI from being displayed. KDE Konqueror 3.5.7 allows remote attackers to spoof the URL address bar by calling setInterval with a small interval and changing the window.location property. Visual truncation vulnerability in KDE Konqueror 3.5.7 allows remote attackers to spoof the URL address bar via an http URI with a large amount of whitespace in the user/password portion.

tags | advisory, remote, web, spoof

systems | linux, mandriva

advisories | CVE-2007-3820, CVE-2007-4224, CVE-2007-4225

SHA-256 | f329935d43d24659138801a2a44db1304c358eea6b45350507c7850565ddaeec

Download | Favorite | View

Ubuntu Security Notice 502-1

Posted Aug 24, 2007

Authored by Ubuntu | Site security.ubuntu.com

Ubuntu Security Notice 502-1 - It was discovered that Konqueror could be tricked into displaying incorrect URLs. Remote attackers could exploit this to increase their chances of tricking a user into visiting a phishing URL, which could lead to credential theft.

tags | advisory, remote

systems | linux, ubuntu

advisories | CVE-2007-3820, CVE-2007-4224, CVE-2007-4225

SHA-256 | dc3b928bdbade90be42435c428724fa925f2afec68daa6aebbcc548fa9a25105

Download | Favorite | View