NetSight
IP …
high7.5

CVE-2004-1158

Konqueror 3.x up to 3.2.2-6, and possibly other versions, allows remote attackers to spoof arbitrary web sites by injecting content from one window into a targ…

Impact

Konqueror 3.x up to 3.2.2-6, and possibly other versions, allows remote attackers to spoof arbitrary web sites by injecting content from one window into a target window or tab whose name is known but resides in a different domain, as demonstrated using a pop-up window on a trusted web site, aka the "window injection" vulnerability.

Affected products

VendorProductAffected versions
KdeKonqueror
Versions 2.1.1, 2.1.2, 2.2.1, 2.2.2, 3.0, 3.0.1
MandrakesoftMandrake Linux
Versions 10.0, 10.1
RedhatFedora Core
Versions core_2.0, core_3.0

References