Window Injection Vulnerability in Konqueror by KDE
CVE-2004-1158

Currently unrated

Key Information:

Vendor

Kde

Status
Vendor
CVE Published:
10 January 2005

What is CVE-2004-1158?

The vulnerability allows remote attackers to spoof arbitrary websites by injecting content from one browser window into another targeted window or tab with a known name, despite existing in different domains. This can be exploited through pop-up windows on trusted sites, posing a significant security risk by misleading users into believing they are interacting with a legitimate page.

References

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.