Executive Summary

Informations
Name CVE-2007-3820 First vendor Publication 2007-07-16
Vendor Cve Last vendor Modification 2024-11-21

Security-Database Scoring CVSS v3

Cvss vector : N/A
Overall CVSS Score NA
Base Score NA Environmental Score NA
impact SubScore NA Temporal Score NA
Exploitabality Sub Score NA
 
Calculate full CVSS 3.0 Vectors scores

Security-Database Scoring CVSS v2

Cvss vector : (AV:N/AC:H/Au:N/C:N/I:P/A:N)
Cvss Base Score 2.6 Attack Range Network
Cvss Impact Score 2.9 Attack Complexity High
Cvss Expoit Score 4.9 Authentication None Required
Calculate full CVSS 2.0 Vectors scores

Detail

konqueror/konq_combo.cc in Konqueror 3.5.7 allows remote attackers to spoof the data: URI scheme in the address bar via a long URI with trailing whitespace, which prevents the beginning of the URI from being displayed.

Original Source

Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3820

OVAL Definitions

Definition Id: oval:org.mitre.oval:def:10345
 
Oval ID: oval:org.mitre.oval:def:10345
Title: konqueror/konq_combo.cc in Konqueror 3.5.7 allows remote attackers to spoof the data: URI scheme in the address bar via a long URI with trailing whitespace, which prevents the beginning of the URI from being displayed.
Description: konqueror/konq_combo.cc in Konqueror 3.5.7 allows remote attackers to spoof the data: URI scheme in the address bar via a long URI with trailing whitespace, which prevents the beginning of the URI from being displayed.
Family: unix Class: vulnerability
Reference(s): CVE-2007-3820
 Version: 5
Platform(s): Red Hat Enterprise Linux 4
CentOS Linux 4
Oracle Linux 4
Red Hat Enterprise Linux 5
CentOS Linux 5
Oracle Linux 5
 Product(s):
Definition Synopsis:

CPE : Common Platform Enumeration

TypeDescriptionCount
Application 1

OpenVAS Exploits

Date Description
2009-04-09 Name : Mandriva Update for konqueror MDKSA-2007:176 (konqueror)
File : nvt/gb_mandriva_MDKSA_2007_176.nasl
2009-03-23 Name : Ubuntu Update for kdebase, kdelibs vulnerabilities USN-502-1
File : nvt/gb_ubuntu_USN_502_1.nasl
2009-02-27 Name : Fedora Update for kdelibs FEDORA-2007-1699
File : nvt/gb_fedora_2007_1699_kdelibs_fc7.nasl
2009-02-27 Name : Fedora Update for kdebase FEDORA-2007-1700
File : nvt/gb_fedora_2007_1700_kdebase_fc7.nasl
2009-02-27 Name : Fedora Update for kdebase FEDORA-2007-2361
File : nvt/gb_fedora_2007_2361_kdebase_fc7.nasl
2009-02-27 Name : Fedora Update for kdebase FEDORA-2007-2985
File : nvt/gb_fedora_2007_2985_kdebase_fc7.nasl
2009-02-27 Name : Fedora Update for kdelibs FEDORA-2007-2985
File : nvt/gb_fedora_2007_2985_kdelibs_fc7.nasl
2009-02-27 Name : Fedora Update for kdebase FEDORA-2007-716
File : nvt/gb_fedora_2007_716_kdebase_fc6.nasl
2009-02-27 Name : Fedora Update for kdelibs FEDORA-2007-716
File : nvt/gb_fedora_2007_716_kdelibs_fc6.nasl
2008-09-04 Name : FreeBSD Ports: kdebase3
File : nvt/freebsd_kdebase3.nasl
0000-00-00 Name : Slackware Advisory SSA:2007-264-01 kdebase, kdelibs
File : nvt/esoft_slk_ssa_2007_264_01.nasl

Open Source Vulnerability Database (OSVDB)

Id Description
37242 KDE Konqueror konqueror/konq_combo.cc data: URI Scheme Address Bar Spoofing

Nessus® Vulnerability Scanner

Date Description
2013-07-12 Name : The remote Oracle Linux host is missing one or more security updates.
File : oraclelinux_ELSA-2007-0905.nasl - Type : ACT_GATHER_INFO
2013-07-12 Name : The remote Oracle Linux host is missing one or more security updates.
File : oraclelinux_ELSA-2007-0909.nasl - Type : ACT_GATHER_INFO
2012-08-01 Name : The remote Scientific Linux host is missing one or more security updates.
File : sl_20071008_kdebase_on_SL5_x.nasl - Type : ACT_GATHER_INFO
2012-08-01 Name : The remote Scientific Linux host is missing one or more security updates.
File : sl_20071008_kdelibs_on_SL5_x.nasl - Type : ACT_GATHER_INFO
2007-11-10 Name : The remote Ubuntu host is missing one or more security-related patches.
File : ubuntu_USN-502-1.nasl - Type : ACT_GATHER_INFO
2007-11-06 Name : The remote Fedora host is missing a security update.
File : fedora_2007-1699.nasl - Type : ACT_GATHER_INFO
2007-11-06 Name : The remote Fedora host is missing a security update.
File : fedora_2007-1700.nasl - Type : ACT_GATHER_INFO
2007-11-06 Name : The remote Fedora host is missing a security update.
File : fedora_2007-2361.nasl - Type : ACT_GATHER_INFO
2007-10-12 Name : The remote CentOS host is missing one or more security updates.
File : centos_RHSA-2007-0905.nasl - Type : ACT_GATHER_INFO
2007-10-12 Name : The remote CentOS host is missing one or more security updates.
File : centos_RHSA-2007-0909.nasl - Type : ACT_GATHER_INFO
2007-10-09 Name : The remote Fedora Core host is missing one or more security updates.
File : fedora_2007-716.nasl - Type : ACT_GATHER_INFO
2007-10-09 Name : The remote Red Hat host is missing one or more security updates.
File : redhat-RHSA-2007-0905.nasl - Type : ACT_GATHER_INFO
2007-10-09 Name : The remote Red Hat host is missing one or more security updates.
File : redhat-RHSA-2007-0909.nasl - Type : ACT_GATHER_INFO
2007-09-24 Name : The remote Slackware host is missing a security update.
File : Slackware_SSA_2007-264-01.nasl - Type : ACT_GATHER_INFO
2007-09-24 Name : The remote FreeBSD host is missing one or more security-related updates.
File : freebsd_pkg_14ad2a2866d211dcb25f02e0185f8d72.nasl - Type : ACT_GATHER_INFO
2007-09-07 Name : The remote Mandrake Linux host is missing one or more security updates.
File : mandrake_MDKSA-2007-176.nasl - Type : ACT_GATHER_INFO

Sources (Detail)

http://alt.swiecki.net/oper1.html
http://osvdb.org/37242
http://secunia.com/advisories/26091
http://secunia.com/advisories/26612
http://secunia.com/advisories/26720
http://secunia.com/advisories/27089
http://secunia.com/advisories/27090
http://secunia.com/advisories/27096
http://secunia.com/advisories/27106
http://secunia.com/advisories/27108
http://securityreason.com/securityalert/2905
http://www.kde.org/info/security/advisory-20070816-1.txt
http://www.mandriva.com/security/advisories?name=MDKSA-2007:176
http://www.redhat.com/support/errata/RHSA-2007-0905.html
http://www.redhat.com/support/errata/RHSA-2007-0909.html
http://www.securityfocus.com/archive/1/473703/100/0/threaded
http://www.securityfocus.com/archive/1/473712/100/0/threaded
http://www.securityfocus.com/bid/24912
http://www.securityfocus.com/bid/24918
http://www.securitytracker.com/id?1018396
http://www.ubuntu.com/usn/usn-502-1
http://www.vupen.com/english/advisories/2007/2538
https://exchange.xforce.ibmcloud.com/vulnerabilities/35430
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.ova...
https://www.redhat.com/archives/fedora-package-announce/2007-October/msg00022...
https://www.redhat.com/archives/fedora-package-announce/2007-October/msg00085...
Source Url

Alert History

If you want to see full details history, please login or register.
0
1
2
3
4
5
6
7
8
9
10
11
12
Date Informations
2024-11-28 23:16:47
  • Multiple Updates
2024-11-28 12:12:57
  • Multiple Updates
2021-05-04 12:06:08
  • Multiple Updates
2021-04-22 01:06:40
  • Multiple Updates
2020-05-23 00:20:08
  • Multiple Updates
2018-10-16 00:19:10
  • Multiple Updates
2017-09-29 09:23:08
  • Multiple Updates
2017-07-29 12:02:24
  • Multiple Updates
2016-06-28 16:45:21
  • Multiple Updates
2016-04-26 16:22:50
  • Multiple Updates
2014-02-17 10:40:55
  • Multiple Updates
2013-05-11 10:31:44
  • Multiple Updates
2012-11-07 00:16:05
  • Multiple Updates