RETIRED: Konqueror Web Browser Data: URL Scheme Address Bar Spoofing Vulnerability

Bugtraq ID:	24918
Class:	Design Error
CVE:
Remote:	Yes
Local:	No
Published:	Jul 16 2007 12:00AM
Updated:	Jul 16 2007 06:16PM
Credit:	Robert Swiecki is credited with the discovery of this issue.
Vulnerable:	Konqueror Konqueror Web Browser 3.5.7
Not Vulnerable:

RETIRED: Konqueror Web Browser Data: URL Scheme Address Bar Spoofing Vulnerability

Konqueror Web Browser is prone to an address bar spoofing vulnerability.

An attacker may exploit this vulnerability to spoof the originating URL of a trusted web site. This issue may allow a remote attacker to carry out phishing style attacks.

Konqueror 3.5.7 on Linux is reported vulnerable to this issue. Previous versions may be affected as well.

NOTE: This BID is being retired because the issue is already being tracked with BID 24912.

RETIRED: Konqueror Web Browser Data: URL Scheme Address Bar Spoofing Vulnerability

An exploit is not required.

RETIRED: Konqueror Web Browser Data: URL Scheme Address Bar Spoofing Vulnerability

Solution:
The KDE team has patched this issue in the KDE code repository. The general availability of this patch is currently unknown. Please see the references for more information.

RETIRED: Konqueror Web Browser Data: URL Scheme Address Bar Spoofing Vulnerability

References:

• KDE Homepage (KDE)