medium5.0Public exploit code
CVE-2004-0527
KDE Konqueror 2.1.1 and 2.2.2 allows remote attackers to spoof a legitimate URL in the status bar via A HREF tags with modified "alt" values that point to the …
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- KDE Konqueror 3.x - Embedded Image URI Obfuscation2004-05-18 · remote · linux · Verified
Impact
KDE Konqueror 2.1.1 and 2.2.2 allows remote attackers to spoof a legitimate URL in the status bar via A HREF tags with modified "alt" values that point to the legitimate site, combined with an image map whose href points to the malicious site, which facilitates a "phishing" attack.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Kde | Konqueror | Versions 2.1.1, 2.2.2, 3.0, 3.0.1, 3.0.2, 3.0.3 |