KDE Konqueror Remote Download Dialog Box Source URI Spoofing Vulnerability
BID:12769
Info
KDE Konqueror Remote Download Dialog Box Source URI Spoofing Vulnerability
| Bugtraq ID: | 12769 |
| Class: | Design Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Mar 09 2005 12:00AM |
| Updated: | Mar 09 2005 12:00AM |
| Credit: | Jakob Balle is credited with the discovery of this issue. |
| Vulnerable: |
KDE Konqueror 3.3.2 KDE Konqueror 3.3.1 KDE Konqueror 3.3 KDE Konqueror 3.2.3 KDE Konqueror 3.2.2 -6 KDE Konqueror 3.2.1 KDE Konqueror 3.1.5 KDE Konqueror 3.1.4 KDE Konqueror 3.1.3 KDE Konqueror 3.1.2 KDE Konqueror 3.1.1 KDE Konqueror 3.1 KDE Konqueror 3.0.5 b KDE Konqueror 3.0.5 KDE Konqueror 3.0.3 KDE Konqueror 3.0.2 KDE Konqueror 3.0.1 KDE Konqueror 3.0 |
| Not Vulnerable: | |
Discussion
KDE Konqueror Remote Download Dialog Box Source URI Spoofing Vulnerability
A remote source URI dialog spoofing vulnerability affects KDE Konqueror. This issue is due to a design error that allows the source URI in a download dialog box to be misrepresented.
An attacker may leverage this issue to spoof the source URI of a file presented to an unsuspecting user. This may lead to a false sense of trust as the unsuspecting user may be presented with a source URI of a trusted site.
A remote source URI dialog spoofing vulnerability affects KDE Konqueror. This issue is due to a design error that allows the source URI in a download dialog box to be misrepresented.
An attacker may leverage this issue to spoof the source URI of a file presented to an unsuspecting user. This may lead to a false sense of trust as the unsuspecting user may be presented with a source URI of a trusted site.
Exploit / POC
KDE Konqueror Remote Download Dialog Box Source URI Spoofing Vulnerability
No exploit is required to leverage this issue.
No exploit is required to leverage this issue.
Solution / Fix
KDE Konqueror Remote Download Dialog Box Source URI Spoofing Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
References
KDE Konqueror Remote Download Dialog Box Source URI Spoofing Vulnerability
References:
References: