Approved changes feed: RSS · Atom

cpe:2.3:a:kde:konqueror:3.2.2:*:*:*:*:*:*:*

part: a version: 3.2.2 update: *

VendorKde (d8ba08cf-7ec1-5504-a5b9-f8cfa50ca850)
ProductKonqueror (4f2f5ab6-c769-5e47-9418-f0068486a5d8)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:deb/debian/konqueror purl2cpe 2026-06-01 10:14:04.931282
pkg:deb/ubuntu/konqueror purl2cpe 2026-06-01 10:14:04.931283
pkg:github/kde/konqueror purl2cpe 2026-06-01 10:14:04.931285
pkg:rpm/fedora/konqueror purl2cpe 2026-06-01 10:14:04.931286
pkg:rpm/opensuse/konqueror purl2cpe 2026-06-01 10:14:04.931288

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2006-3672 vulnerable 2026-06-03 14:27:35.663092 Details available
KDE Konqueror 3.5.1 and earlier allows remote attackers to cause a denial of service (application crash) by calling the replaceChild method on a DOM object, which triggers a null dereference, as demonstrated by calling document.replaceChild with a 0 (zero) argument.
Published: 2006-07-18T01:00:00.000Z
Updated: 2024-08-07T18:39:53.579Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-0721 vulnerable 2026-06-03 14:26:36.654742 Details available
Konqueror 3.1.3, 3.2.2, and possibly other versions does not properly prevent a frame in one domain from injecting content into a frame that belongs to another domain, which facilitates web site spoofing and other attacks, aka the frame injection vulnerability.
Published: 2004-07-23T04:00:00.000Z
Updated: 2024-08-08T00:24:27.114Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.