CVE-2007-4224

URL spoof in address bar

Published Aug 8, 2007 CVSS 2.0 · 4.3 Medium EPSS 1.8% KEV · Not listed
Description
KDE Konqueror 3.5.7 allows remote attackers to spoof the URL address bar by calling setInterval with a small interval and changing the window.location property.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2007-4207 KDE Konqueror 3.5.7 allows remote attackers to spoof the URL address bar by calling setInterval with a small interval and changing the window.location property.
Ubuntu USN Ubuntu USN USN-502-1 KDE vulnerabilities
References
Link Providers
http://lists.grok.org.uk/pipermail/full-disclosure/2007-August/065101.html cve-icon cve-icon
http://lists.opensuse.org/opensuse-security-announce/2007-10/msg00006.html cve-icon cve-icon
http://secunia.com/advisories/26351 cve-icon cve-icon
http://secunia.com/advisories/26612 cve-icon cve-icon
http://secunia.com/advisories/26690 cve-icon cve-icon
http://secunia.com/advisories/26720 cve-icon cve-icon
http://secunia.com/advisories/27089 cve-icon cve-icon
http://secunia.com/advisories/27090 cve-icon cve-icon
http://secunia.com/advisories/27096 cve-icon cve-icon
http://secunia.com/advisories/27106 cve-icon cve-icon
http://secunia.com/advisories/27108 cve-icon cve-icon
http://secunia.com/advisories/27271 cve-icon cve-icon
http://securityreason.com/securityalert/2982 cve-icon cve-icon
http://securitytracker.com/id?1018579 cve-icon cve-icon
http://www.kde.org/info/security/advisory-20070816-1.txt cve-icon cve-icon
http://www.mandriva.com/security/advisories?name=MDKSA-2007:176 cve-icon cve-icon
http://www.redhat.com/support/errata/RHSA-2007-0905.html cve-icon cve-icon
http://www.redhat.com/support/errata/RHSA-2007-0909.html cve-icon cve-icon
http://www.securityfocus.com/archive/1/475689/100/0/threaded cve-icon cve-icon
http://www.securityfocus.com/archive/1/475730/100/0/threaded cve-icon cve-icon
http://www.securityfocus.com/archive/1/475731/100/0/threaded cve-icon cve-icon
http://www.securityfocus.com/archive/1/475763/100/0/threaded cve-icon cve-icon
http://www.securityfocus.com/bid/25219 cve-icon cve-icon
http://www.ubuntu.com/usn/usn-502-1 cve-icon cve-icon
http://www.vupen.com/english/advisories/2007/2807 cve-icon cve-icon
https://exchange.xforce.ibmcloud.com/vulnerabilities/35828 cve-icon cve-icon
https://issues.rpath.com/browse/RPL-1615 cve-icon cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2007-4224 cve-icon
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9879 cve-icon cve-icon
https://www.cve.org/CVERecord?id=CVE-2007-4224 cve-icon
https://www.redhat.com/archives/fedora-package-announce/2007-October/msg00022.html cve-icon cve-icon
https://www.redhat.com/archives/fedora-package-announce/2007-October/msg00085.html cve-icon cve-icon
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
mitre
Published
Updated
Aug 7, 2024, 2:46 PM
Reserved
Aug 8, 2007, 12:00 AM
Status
Modified
Published
Aug 8, 2007, 9:17 PM
Modified
Jun 16, 2026, 10:43 PM
Severity
Low
Public date
Aug 7, 2007, 12:00 AM