Vulnerability Name:

CVE-2007-4224 (CCN-35828)

Assigned:2007-08-07
Published:2007-08-07
Updated:2018-10-15
Summary:KDE Konqueror 3.5.7 allows remote attackers to spoof the URL address bar by calling setInterval with a small interval and changing the window.location property.
CVSS v3 Severity:4.8 Medium (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N)
Exploitability Metrics:Attack Vector (AV): Network
Attack Complexity (AC): High
Privileges Required (PR): None
User Interaction (UI): None
Scope:Scope (S): Unchanged
Impact Metrics:Confidentiality (C): Low
Integrity (I): Low
Availibility (A): None
CVSS v2 Severity:4.3 Medium (CVSS v2 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N)
3.2 Low (Temporal CVSS v2 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N/E:U/RL:OF/RC:C)
Exploitability Metrics:Access Vector (AV): Network
Access Complexity (AC): Medium
Authentication (Au): None
Impact Metrics:Confidentiality (C): None
Integrity (I): Partial
Availibility (A): None
4.0 Medium (CCN CVSS v2 Vector: AV:N/AC:H/Au:N/C:P/I:P/A:N)
3.0 Low (CCN Temporal CVSS v2 Vector: AV:N/AC:H/Au:N/C:P/I:P/A:N/E:U/RL:OF/RC:C)
Exploitability Metrics:Access Vector (AV): Network
Access Complexity (AC): High
Athentication (Au): None
Impact Metrics:Confidentiality (C): Partial
Integrity (I): Partial
Availibility (A): None
Vulnerability Type:CWE-59
Vulnerability Consequences:Gain Access
References:Source: CCN
Type: Full-Disclosure Mailing List, Mon Aug 06 2007 - 16:44:15 CDT
Konqueror: URL address bar spoofing vulnerabilities

Source: MITRE
Type: CNA
CVE-2007-4224

Source: FULLDISC
Type: UNKNOWN
20070806 Konqueror: URL address bar spoofing vulnerabilities

Source: SUSE
Type: UNKNOWN
SUSE-SR:2007:021

Source: CCN
Type: RHSA-2007-0905
Moderate: kdebase security update

Source: CCN
Type: RHSA-2007-0909
Moderate: kdelibs security update

Source: CCN
Type: SA26351
Konqueror "setInterval()" Address Bar Spoofing Vulnerability

Source: SECUNIA
Type: UNKNOWN
26351

Source: SECUNIA
Type: UNKNOWN
26612

Source: SECUNIA
Type: UNKNOWN
26690

Source: SECUNIA
Type: UNKNOWN
26720

Source: SECUNIA
Type: UNKNOWN
27089

Source: SECUNIA
Type: UNKNOWN
27090

Source: SECUNIA
Type: UNKNOWN
27096

Source: SECUNIA
Type: UNKNOWN
27106

Source: SECUNIA
Type: UNKNOWN
27108

Source: SECUNIA
Type: UNKNOWN
27271

Source: SREASON
Type: UNKNOWN
2982

Source: CCN
Type: SECTRACK ID: 1018579
KDE Konqueror Flaw Lets Remote Users Spoof the Address Bar

Source: SECTRACK
Type: UNKNOWN
1018579

Source: CCN
Type: ASA-2007-413
kdebase security update (RHSA-2007-0905)

Source: CONFIRM
Type: UNKNOWN
http://www.kde.org/info/security/advisory-20070816-1.txt

Source: CCN
Type: Konqueror Web site
Konqueror - Web Browser, File Manager - and more!

Source: MANDRIVA
Type: UNKNOWN
MDKSA-2007:176

Source: REDHAT
Type: UNKNOWN
RHSA-2007:0905

Source: REDHAT
Type: UNKNOWN
RHSA-2007:0909

Source: BUGTRAQ
Type: UNKNOWN
20070806 Konqueror: URL address bar spoofing vulnerabilities

Source: BUGTRAQ
Type: UNKNOWN
20070806 Re: Konqueror: URL address bar spoofingvulnerabilities

Source: BUGTRAQ
Type: UNKNOWN
20070806 Re: Konqueror: URL address bar spoofing vulnerabilities

Source: BUGTRAQ
Type: UNKNOWN
20070807 Re: [Full-disclosure] Konqueror: URL address bar spoofing vulnerabilities

Source: BID
Type: UNKNOWN
25219

Source: CCN
Type: BID-25219
KDE Konqueror SetInterval Function Address Bar URI Spoofing Vulnerability

Source: CCN
Type: USN-502-1
KDE vulnerabilities

Source: UBUNTU
Type: UNKNOWN
USN-502-1

Source: VUPEN
Type: UNKNOWN
ADV-2007-2807

Source: XF
Type: UNKNOWN
konqueror-setinterval-spoofing(35828)

Source: XF
Type: UNKNOWN
konqueror-setinterval-spoofing(35828)

Source: CONFIRM
Type: UNKNOWN
https://issues.rpath.com/browse/RPL-1615

Source: OVAL
Type: UNKNOWN
oval:org.mitre.oval:def:9879

Source: FEDORA
Type: UNKNOWN
FEDORA-2007-2361

Source: FEDORA
Type: UNKNOWN
FEDORA-2007-716

Source: SUSE
Type: SUSE-SR:2007:021
SUSE Security Summary Report

Vulnerable Configuration:Configuration 1:
  • cpe:/a:kde:konqueror:3.5.7:*:*:*:*:*:*:*

  • Configuration RedHat 1:
  • cpe:/o:redhat:enterprise_linux:4:*:*:*:*:*:*:*

  • Configuration RedHat 2:
  • cpe:/o:redhat:enterprise_linux:4::as:*:*:*:*:*

  • Configuration RedHat 3:
  • cpe:/o:redhat:enterprise_linux:4::desktop:*:*:*:*:*

  • Configuration RedHat 4:
  • cpe:/o:redhat:enterprise_linux:4::es:*:*:*:*:*

  • Configuration RedHat 5:
  • cpe:/o:redhat:enterprise_linux:4::ws:*:*:*:*:*

  • Configuration RedHat 6:
  • cpe:/o:redhat:enterprise_linux:5:*:*:*:*:*:*:*

  • Configuration RedHat 7:
  • cpe:/o:redhat:enterprise_linux:5::client:*:*:*:*:*

  • Configuration RedHat 8:
  • cpe:/o:redhat:enterprise_linux:5::client_workstation:*:*:*:*:*

  • Configuration RedHat 9:
  • cpe:/o:redhat:enterprise_linux:5::server:*:*:*:*:*

  • * Denotes that component is vulnerable
    Oval Definitions
    Definition IDClassTitleLast Modified
    oval:org.opensuse.security:def:20074224
    V
    CVE-2007-4224
    2022-05-20
    oval:org.opensuse.security:def:42335
    P
    Security update for xen (Important)
    2022-02-04
    oval:org.opensuse.security:def:31754
    P
    Security update for libsndfile (Important)
    2022-01-05
    oval:org.opensuse.security:def:32236
    P
    Security update for MozillaFirefox (Important)
    2021-12-12
    oval:org.opensuse.security:def:26179
    P
    Security update for gmp (Moderate)
    2021-12-02
    oval:org.opensuse.security:def:31712
    P
    Security update for xen (Moderate)
    2021-12-01
    oval:org.opensuse.security:def:31705
    P
    Security update for postgresql, postgresql13, postgresql14 (Important)
    2021-11-20
    oval:org.opensuse.security:def:32215
    P
    Security update for qemu (Important)
    2021-11-10
    oval:org.opensuse.security:def:42132
    P
    Security update for containerd, docker, runc (Important)
    2021-10-25
    oval:org.opensuse.security:def:31279
    P
    Security update for sqlite3 (Important)
    2021-09-23
    oval:org.opensuse.security:def:26135
    P
    Security update for hivex (Moderate)
    2021-09-23
    oval:org.opensuse.security:def:32171
    P
    Security update for the Linux Kernel (Live Patch 36 for SLE 12 SP3) (Important)
    2021-08-25
    oval:org.opensuse.security:def:31257
    P
    Security update for the Linux Kernel (Live Patch 38 for SLE 12 SP3) (Important)
    2021-08-25
    oval:org.opensuse.security:def:26108
    P
    Security update for openssl-1_1 (Important)
    2021-08-24
    oval:org.opensuse.security:def:32149
    P
    Security update for linuxptp (Important)
    2021-07-21
    oval:org.opensuse.security:def:31647
    P
    Security update for libgcrypt (Important)
    2021-06-24
    oval:org.opensuse.security:def:31205
    P
    Security update for the Linux Kernel (Live Patch 39 for SLE 12 SP3) (Important)
    2021-06-18
    oval:org.opensuse.security:def:31638
    P
    Security update for caribou (Important)
    2021-06-10
    oval:org.opensuse.security:def:31194
    P
    Security update for qemu (Important)
    2021-06-08
    oval:org.opensuse.security:def:36160
    P
    kdelibs3-3.5.10-23.27.1 on GA media (Moderate)
    2021-06-08
    oval:org.opensuse.security:def:36426
    P
    kdelibs3-32bit-3.5.10-23.27.1 on GA media (Moderate)
    2021-06-08
    oval:org.opensuse.security:def:42567
    P
    kdelibs3-3.5.10-23.27.1 on GA media (Moderate)
    2021-06-08
    oval:org.opensuse.security:def:31193
    P
    Security update for libX11 (Important)
    2021-06-08
    oval:org.opensuse.security:def:32110
    P
    Security update for gstreamer-plugins-bad (Important)
    2021-06-07
    oval:org.opensuse.security:def:31627
    P
    Security update for djvulibre (Important)
    2021-05-31
    oval:org.opensuse.security:def:26055
    P
    Security update for hivex (Moderate)
    2021-05-26
    oval:org.opensuse.security:def:26052
    P
    Security update for graphviz (Critical)
    2021-05-19
    oval:org.opensuse.security:def:26051
    P
    Security update for djvulibre (Important)
    2021-05-19
    oval:org.opensuse.security:def:31613
    P
    Security update for tomcat (Important)
    2021-04-29
    oval:org.opensuse.security:def:32080
    P
    Security update for the Linux Kernel (Live Patch 31 for SLE 12 SP3) (Important)
    2021-04-28
    oval:org.opensuse.security:def:32892
    P
    Security update for fwupdate (Important)
    2021-04-08
    oval:org.opensuse.security:def:32061
    P
    Security update for the Linux Kernel (Live Patch 33 for SLE 12 SP3) (Important)
    2021-04-07
    oval:org.opensuse.security:def:31349
    P
    Security update for MozillaFirefox (Important)
    2021-03-01
    oval:org.opensuse.security:def:33084
    P
    Security update for tomcat (Moderate)
    2021-02-25
    oval:org.opensuse.security:def:26196
    P
    Security update for ImageMagick (Moderate)
    2021-02-19
    oval:org.opensuse.security:def:26157
    P
    Security update for the Linux Kernel (Important)
    2021-02-09
    oval:org.opensuse.security:def:31649
    P
    Security update for postgresql, postgresql12, postgresql13 (Important)
    2021-01-26
    oval:org.opensuse.security:def:26210
    P
    Security update for MozillaFirefox (Important)
    2021-01-12
    oval:org.opensuse.security:def:31626
    P
    Security update for dovecot22 (Important)
    2021-01-04
    oval:org.opensuse.security:def:25976
    P
    Security update for curl (Moderate)
    2020-12-10
    oval:org.opensuse.security:def:25975
    P
    Security update for openssl-1_0_0 (Important)
    2020-12-09
    oval:org.opensuse.security:def:32005
    P
    Security update for xen (Important)
    2020-12-07
    oval:org.opensuse.security:def:32013
    P
    Security update for the Linux Kernel (Live Patch 36 for SLE 12 SP3) (Important)
    2020-12-07
    oval:org.opensuse.security:def:31560
    P
    Security update for python-cryptography (Moderate)
    2020-12-04
    oval:org.opensuse.security:def:35928
    P
    kdelibs3-3.5.10-23.27.1 on GA media (Moderate)
    2020-12-03
    oval:org.opensuse.security:def:35571
    P
    kdelibs3-3.5.10-23.27.1 on GA media (Moderate)
    2020-12-03
    oval:org.opensuse.security:def:35725
    P
    kdelibs3-3.5.10-23.27.1 on GA media (Moderate)
    2020-12-03
    oval:org.opensuse.security:def:41978
    P
    kdelibs3-3.5.10-23.27.1 on GA media (Moderate)
    2020-12-03
    oval:org.opensuse.security:def:31040
    P
    Security update for kdelibs4
    2020-12-01
    oval:org.opensuse.security:def:25561
    P
    Security update for xen (Important)
    2020-12-01
    oval:org.opensuse.security:def:31815
    P
    Security update for apache2-mod_perl (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:31395
    P
    Security update for perl
    2020-12-01
    oval:org.opensuse.security:def:25913
    P
    Security update for tcpdump, libpcap (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:25699
    P
    Security update for dnsmasq (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:27424
    P
    kdelibs3-32bit on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:25122
    P
    Security update for ghostscript (Important)
    2020-12-01
    oval:org.opensuse.security:def:31125
    P
    Security update for kvm (Important)
    2020-12-01
    oval:org.opensuse.security:def:25904
    P
    Security update for gegl (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:32341
    P
    Security update for spice (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:32651
    P
    dhcpcd on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:31407
    P
    Security update for perl-XML-LibXML (Important)
    2020-12-01
    oval:org.opensuse.security:def:26317
    P
    Security update for chromium (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:25955
    P
    Security update for gstreamer-0_10-plugins-bad (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:32446
    P
    Security update for xen (Important)
    2020-12-01
    oval:org.opensuse.security:def:25134
    P
    Security update for apache2 (Important)
    2020-12-01
    oval:org.opensuse.security:def:25898
    P
    Security update for the Linux Kernel (Important)
    2020-12-01
    oval:org.opensuse.security:def:25479
    P
    Security update for mariadb (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:26552
    P
    g3utils on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:33123
    P
    kdelibs3 on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:25326
    P
    Security update for libvirt (Important)
    2020-12-01
    oval:org.opensuse.security:def:26693
    P
    evolution-data-server on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:26725
    P
    kdelibs3 on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:25554
    P
    Security update for unzip (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:31993
    P
    Security update for java-1_7_1-ibm (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:27123
    P
    file-32bit on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:25987
    P
    Security update for the Linux Kernel (Critical)
    2020-12-01
    oval:org.opensuse.security:def:25464
    P
    Security update for java-11-openjdk (Important)
    2020-12-01
    oval:org.opensuse.security:def:26751
    P
    libltdl7 on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:25763
    P
    Security Update for Linux Kernel (Important)
    2020-12-01
    oval:org.opensuse.security:def:31969
    P
    Security update for ipsec-tools (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:25853
    P
    Security update for gtk2 (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:32380
    P
    Security update for tiff (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:32536
    P
    kdelibs3 on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:25276
    P
    Security update for openssl-1_1 (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:25840
    P
    Security update for libvirt (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:32853
    P
    emacs on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:31406
    P
    Security update for perl-PlRPC (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:26536
    P
    dbus-1 on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:25288
    P
    Security update for webkit2gtk3 (Important)
    2020-12-01
    oval:org.opensuse.security:def:31503
    P
    Security update for python27 (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:26339
    P
    Security update for openjpeg2 (Important)
    2020-12-01
    oval:org.opensuse.security:def:25710
    P
    Security update for log4j (Important)
    2020-12-01
    oval:org.opensuse.security:def:31844
    P
    Security update for clamav (Important)
    2020-12-01
    oval:org.opensuse.security:def:26441
    P
    Security update for phpMyAdmin (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:31039
    P
    Security update for kdelibs3 (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:25480
    P
    Security update for mariadb-100 (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:31849
    P
    Security update for clamav (Important)
    2020-12-01
    oval:org.opensuse.security:def:31793
    P
    Security update for MozillaFirefox (Important)
    2020-12-01
    oval:org.opensuse.security:def:26927
    P
    kdelibs3 on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:25785
    P
    Security update for flash-player (Critical)
    2020-12-01
    oval:org.opensuse.security:def:25548
    P
    Security update for ceph (Important)
    2020-12-01
    oval:org.opensuse.security:def:31908
    P
    Security update for freetype2 (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:27389
    P
    derby on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:31051
    P
    Security update for the Linux Kernel (Important)
    2020-12-01
    oval:org.opensuse.security:def:25618
    P
    Security update for python3 (Important)
    2020-12-01
    oval:org.opensuse.security:def:32292
    P
    Security update for postgresql94 (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:31396
    P
    Security update for perl (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:25994
    P
    Security update for ImageMagick (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:25752
    P
    Security update for libreoffice (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:25123
    P
    Security update for ucode-intel (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:25854
    P
    Security update for the Linux Kernel (Important)
    2020-12-01
    oval:org.opensuse.security:def:32690
    P
    kdelibs3 on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:25478
    P
    Security update for MozillaFirefox (Important)
    2020-12-01
    oval:org.opensuse.security:def:31481
    P
    Security update for python (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:26401
    P
    Security update for chromium (Important)
    2020-12-01
    oval:org.opensuse.security:def:25198
    P
    Security update for perl (Important)
    2020-12-01
    oval:org.opensuse.security:def:26388
    P
    Security update for irssi (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:26690
    P
    emacs on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:25490
    P
    Security update for the Linux Kernel (Important)
    2020-12-01
    oval:org.opensuse.security:def:26605
    P
    libtiff3 on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:26254
    P
    Security update for dia (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:25407
    P
    Security update for samba (Important)
    2020-12-01
    oval:org.opensuse.security:def:31803
    P
    Security update for amanda (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:26707
    P
    glib2 on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:25682
    P
    Security update for wpa_supplicant (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:31947
    P
    Security update for gpg2 (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:27158
    P
    kdelibs3 on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:25702
    P
    Security update for libvpx (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:32497
    P
    cron on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:25820
    P
    Security update for xerces-c (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:25801
    P
    Security update for libvdpau (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:26260
    P
    Security update for Mesa (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:25906
    P
    Security update for sane-backends (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:32402
    P
    Security update for vim (Important)
    2020-12-01
    oval:org.opensuse.security:def:25277
    P
    Security update for git (Important)
    2020-12-01
    oval:org.opensuse.security:def:31411
    P
    Security update for php53 (Important)
    2020-12-01
    oval:org.opensuse.security:def:26286
    P
    Security update for libcdio (Low)
    2020-12-01
    oval:org.opensuse.security:def:26008
    P
    Security update for the Linux Kernel (Important)
    2020-12-01
    oval:org.opensuse.security:def:25709
    P
    Security update for java-1_8_0-ibm (Important)
    2020-12-01
    oval:org.opensuse.security:def:31493
    P
    Security update for python
    2020-12-01
    oval:org.opensuse.security:def:26427
    P
    Security update for python-Django (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:26571
    P
    kdelibs3 on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:25352
    P
    Security update for LibVNCServer (Important)
    2020-12-01
    oval:org.opensuse.security:def:31762
    P
    Security update for MozillaFirefox (Important)
    2020-12-01
    oval:org.opensuse.security:def:26654
    P
    xpdf-tools on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:26892
    P
    expat on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:25721
    P
    Security update for MozillaFirefox (Important)
    2020-12-01
    oval:org.opensuse.security:def:31936
    P
    Security update for glibc (Important)
    2020-12-01
    oval:org.opensuse.security:def:31859
    P
    Security update for curl (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:26485
    P
    Security update for singularity (Moderate)
    2020-12-01
    oval:org.mitre.oval:def:17655
    P
    USN-502-1 -- kdebase, kdelibs vulnerabilities
    2014-06-30
    oval:org.mitre.oval:def:22442
    P
    ELSA-2007:0909: kdelibs security update (Moderate)
    2014-05-26
    oval:org.mitre.oval:def:22556
    P
    ELSA-2007:0905: kdebase security update (Moderate)
    2014-05-26
    oval:org.mitre.oval:def:9879
    V
    KDE Konqueror 3.5.7 allows remote attackers to spoof the URL address bar by calling setInterval with a small interval and changing the window.location property.
    2013-04-29
    oval:com.redhat.rhsa:def:20070909
    P
    RHSA-2007:0909: kdelibs security update (Moderate)
    2008-03-20
    oval:com.redhat.rhsa:def:20070905
    P
    RHSA-2007:0905: kdebase security update (Moderate)
    2007-10-08
    BACK
    kde konqueror 3.5.7