Description
Visual truncation vulnerability in KDE Konqueror 3.5.7 allows remote attackers to spoof the URL address bar via an http URI with a large amount of whitespace in the user/password portion.
References
- 2982 third-party-advisory
- FEDORA-2007-2361 vendor-advisory
- FEDORA-2007-716 vendor-advisory
- USN-502-1 vendor-advisory
- konqueror-data-spoofing(35829) vdb-entry
- ADV-2007-2807 vdb-entry
- 26351 third-party-advisory
- 26690 third-party-advisory
- 1018579 vdb-entry
- 27089 third-party-advisory
- 26612 third-party-advisory
- 27096 third-party-advisory
- 26720 third-party-advisory
- https://issues.rpath.com/browse/RPL-1615
- MDKSA-2007:176 vendor-advisory
- 20070806 Konqueror: URL address bar spoofing vulnerabilities mailing-list
- http://www.kde.org/info/security/advisory-20070816-1.txt