Konqueror "data:" URI-Schema Sicherheitslücke durch Adresszeilenfälschung - Advisories

Software Inspectors

	Scan Online

	Personal (PSI)

	Network (NSI 2.0)

Solutions For

	Security Professionals

	Security Vendors

Free Solutions For

	Open Communities

	Journalists & Media

Secunia Advisories

	Search

	Historic Advisories

	Listed By Product

	Listed By Vendor

	Statistics / Graphs

	Secunia Research

	Report Vulnerability

	About Advisories

Virus Information

	Chronological List

	Last 10 Virus Alerts

	About Virus Information

Secunia Customers

	Customer Area

Konqueror "data:" URI-Schema Sicherheitslücke durch Adresszeilenfälschung

Secunia Advisory:	SA26091
Herausgegeben:	2007-07-16
Last Update:	2007-09-17

Gefahrenstufe:	Weniger kritisch
Auswirkung:	Spoofing
Von Wo:	Aus dem Internet
Lösungsstatus:	Hersteller-Patch

Software:	Konqueror 3.x

CVE reference:	CVE-2007-3820 (Secunia mirror)

	Want to know the next time vulnerabilities are fixed in this product? - Companies can be alerted via email and SMS!

Beschreibung: Robert Swiecki hat eine Sicherheitslücke in Konqueror gemeldet, die böswillige Personen ausnutzen können, um Spoofing-Attacken durchzuführen. Weitere Informationen: SA26074 Die Sicherheitslücke wurde in Version 3.5.7 gemeldet. Andere Versionen können ebenfalls betroffen sein. Lösung: Verwenden Sie die Patches: KDE 3.5.7 und neuer: ftp://ftp.kde.org/pub/kde/security_patches/post-3.5.7-kdelibs-kdecore-2.diff ftp://ftp.kde.org/pub/kde/security_patches/post-3.5.7-kdebase-konqueror-2.diff KDE 3.4.2 und neuer: ftp://ftp.kde.org/pub/kde/security_patches/post-3.4.2-kdebase-konqueror.diff Gemeldet und/oder entdeckt von: Robert Swiecki Änderungen: 2007-07-19: CVE-Referenz hinzugefügt. 2007-08-17: "Lösung" aktualisiert und Link zur KDE Advisory hinzugefügt. 2007-09-17: "Lösung" mit Informationen über Patches für KDE 3.4.2 aktualisiert. Link zur Advisory von KDE aktualisiert. Original Advisory: http://lists.grok.org.uk/pipermail/full-disclosure/2007-July/064638.html KDE: http://www.kde.org/info/security/advisory-20070914-1.txt Andere Referenzen: SA26074: http://secunia.com/advisories/26074/



Please note: The information that this Secunia Advisory is based on comes from a third party unless stated otherwise. Secunia collects, validates, and verifies all vulnerability reports issued by security research groups, vendors, and others.

3 Related Secunia Security Advisories

1. Konqueror "setInterval()" Adresszeilenfälschung Sicherheitslücke

2. Konqueror Flash Player Plug-in Sicherheitslücke

3. Konqueror HTML-Parsing Schwachstelle

Show all related advisories

Send Feedback to Secunia

If you have new information regarding this Secunia advisory or a product in our database, please send it to us using either our web form or email us at vuln@secunia.com. Ideas, suggestions, and other feedback are most welcome.

Secunia PSI
Scan | Patch | Track
Free Download

Secunia Poll

Most Popular Advisories

1.	HP TCP/IP Services for OpenVMS Finger Format String Vulnerability

2.	Novell eDirectory Multiple Vulnerabilities

3.	Adium MSN SLP Message Integer Overflow Vulnerabilities

4.	dotProject SQL Injection and Cross-Site Scripting

5.	phpJobScheduler "installed_conf ig_file" File Inclusion Vulnerabilities

6.	Caudium "configvar" Insecure Temporary Files

7.	phpMyRealty "price_max" SQL Injection Vulnerability

8.	Blogn Cross-Site Scripting and Cross-Site Request Forgery

9.	Red Hat update for libtiff

10.	IBM WebSphere Application Server for z/OS HTTP Server mod_proxy_ftp Vulnerability