Description
konqueror/konq_combo.cc in Konqueror 3.5.7 allows remote attackers to spoof the data: URI scheme in the address bar via a long URI with trailing whitespace, which prevents the beginning of the URI from being displayed.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 5 | kdebase +1 | 6:3.5.4-15.el5 | RHSA-2007:0905 |
| RHEL 5 | kdelibs +2 | 6:3.5.4-13.el5 | RHSA-2007:0909 |
| RHEL 4 | kdebase +1 | 6:3.3.1-6.el4 | RHSA-2007:0905 |
| RHEL 4 | kdelibs +1 | 6:3.3.1-9.el4 | RHSA-2007:0909 |
Advisories 2
- RHSA-2007:0905 Red Hat Security Advisory: kdebase security update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- RHSA-2007:0909 Red Hat Security Advisory: kdelibs security update Red Hat Security Advisories (RHSA) · Jun 26, 2026
References
- http://alt.swiecki.net/oper1.html
- RHSA-2007:0909 vendor-advisory
- FEDORA-2007-716 vendor-advisory
- FEDORA-2007-2361 vendor-advisory
- 24918 vdb-entry
- RHSA-2007:0905 vendor-advisory
- USN-502-1 vendor-advisory
- 26091 third-party-advisory
- 27106 third-party-advisory
- 27108 third-party-advisory
- opera-konqueror-addressbar-spoofing(35430) vdb-entry
- oval:org.mitre.oval:def:10345 vdb-entry signature
- 27090 third-party-advisory
- ADV-2007-2538 vdb-entry
- 27089 third-party-advisory
- 26612 third-party-advisory
- 27096 third-party-advisory
- 20070713 Opera/Konqueror: data: URL scheme address bar spoofing mailing-list
- 20070714 Re: Opera/Konqueror: data: URL scheme address bar spoofing mailing-list
- 26720 third-party-advisory
- 24912 vdb-entry
- MDKSA-2007:176 vendor-advisory
- http://www.kde.org/info/security/advisory-20070816-1.txt
- 1018396 vdb-entry
- 2905 third-party-advisory
- 37242 vdb-entry