Address Bar Spoofing in Konqueror by KDE
CVE-2007-3820

Currently unrated

Key Information:

Vendor

Kde

Status
Vendor
CVE Published:
17 July 2007

What is CVE-2007-3820?

A vulnerability exists in Konqueror 3.5.7 that allows remote attackers to spoof the data: URI scheme displayed in the browser's address bar. By constructing a specially crafted long URI that ends with trailing whitespace, the attacker can obscure the actual starting point of the URI, leading users to believe they are visiting a legitimate site while they may actually be under their control. This vulnerability underscores the importance of caution when clicking on links and the need for robust security measures.

References

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.