Fluid Attacks Database

Description

KDE Konqueror 3.5.7 allows remote attackers to spoof the URL address bar by calling setInterval with a small interval and changing the window.location property.

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem	Component	Affected version	Patched versions
rpm rhel5	kdelibs	<6:3.5.4-13.el5	6:3.5.4-13.el5
rpm rhel5	kdebase	<6:3.5.4-15.el5	6:3.5.4-15.el5

Aliases

1. CVE-2007-42242. NVD-2007-42243. OSV-2007-4224

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.