GCVE - cpe:2.3:a:kde:konqueror:3.5.5:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:kde:konqueror:3.5.5:*:*:*:*:*:*:*

part: a version: 3.5.5 update: *

Vendor	Kde (`d8ba08cf-7ec1-5504-a5b9-f8cfa50ca850`)
Product	Konqueror (`4f2f5ab6-c769-5e47-9418-f0068486a5d8`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from purl2cpe mapping

PURL mappings

PURL	Source	Last updated
`pkg:deb/debian/konqueror`	purl2cpe	2026-06-01 10:14:04.940835
`pkg:deb/ubuntu/konqueror`	purl2cpe	2026-06-01 10:14:04.940837
`pkg:github/kde/konqueror`	purl2cpe	2026-06-01 10:14:04.940838
`pkg:rpm/fedora/konqueror`	purl2cpe	2026-06-01 10:14:04.940840
`pkg:rpm/opensuse/konqueror`	purl2cpe	2026-06-01 10:14:04.940841

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2007-6591`	vulnerable	2026-06-03 14:28:30.021912	Details available KDE Konqueror 3.5.5 and 3.95.00, when a user accepts an SSL server certificate on the basis of the CN domain name in the DN field, regards the certificate as also accepted for all domain names in subjectAltName:dNSName fields, even though these fields cannot be examined in the product, which makes it easier for remote attackers to trick a user into accepting an invalid certificate for a spoofed web site. Published: 2007-12-28T21:00:00.000Z Updated: 2024-08-07T16:11:06.084Z Open on db.gcve.eu Reference links http://securityreason.com/securityalert/3498 http://www.securityfocus.com/archive/1/483937/100/100/threaded http://www.securityfocus.com/archive/1/483960/100/100/threaded http://www.securityfocus.com/archive/1/483929/100/100/threaded http://nils.toedtmann.net/pub/subjectAltName.txt	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2007-3143`	vulnerable	2026-06-03 14:28:15.239310	Details available Visual truncation vulnerability in Konqueror 3.5.5 allows remote attackers to spoof the address bar and possibly conduct phishing attacks via a long hostname, which is truncated after a certain number of characters, as demonstrated by a phishing attack using HTTP Basic Authentication. Published: 2007-06-11T18:00:00.000Z Updated: 2024-08-07T14:05:28.649Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/24352 http://osvdb.org/43465 https://exchange.xforce.ibmcloud.com/vulnerabilities/34983 http://testing.bitsploit.de/test.html http://www.0x000000.com/?i=334	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2007-2164`	vulnerable	2026-06-03 14:28:07.557685	Details available Konqueror 3.5.5 release 45.4 allows remote attackers to cause a denial of service (browser crash or abort) via JavaScript that matches a regular expression against a long string, as demonstrated using /(.)*/. Published: 2007-04-22T19:00:00.000Z Updated: 2024-08-07T13:23:50.791Z Open on db.gcve.eu Reference links http://www.securityfocus.com/archive/1/466147/100/0/threaded http://securityreason.com/securityalert/2600 http://www.securityfocus.com/archive/1/466017/100/0/threaded	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2007-1565`	vulnerable	2026-06-03 14:28:05.930185	Details available Konqueror 3.5.5 allows remote attackers to cause a denial of service (crash) by using JavaScript to read a child iframe having an ftp:// URI. Published: 2007-03-21T19:00:00.000Z Updated: 2024-09-16T19:25:44.905Z Open on db.gcve.eu Reference links http://bindshell.net/papers/ftppasv/ftp-client-pasv-manipulation.pdf	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2007-1564`	vulnerable	2026-06-03 14:28:05.929907	Details available The FTP protocol implementation in Konqueror 3.5.5 allows remote servers to force the client to connect to other servers, perform a proxied port scan, or obtain sensitive information by specifying an alternate server address in an FTP PASV response. Published: 2007-03-21T19:00:00.000Z Updated: 2024-08-07T12:59:08.664Z Open on db.gcve.eu Reference links http://www.redhat.com/support/errata/RHSA-2007-0909.html https://issues.rpath.com/browse/RPL-1201 http://secunia.com/advisories/24889 http://www.ubuntu.com/usn/usn-447-1 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10646	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2007-1308`	vulnerable	2026-06-03 14:28:05.030401	Details available ecma/kjs_html.cpp in KDE JavaScript (KJS), as used in Konqueror in KDE 3.5.5, allows remote attackers to cause a denial of service (crash) by accessing the content of an iframe with an ftp:// URI in the src attribute, probably due to a NULL pointer dereference. Published: 2007-03-07T00:00:00.000Z Updated: 2024-08-07T12:50:35.222Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/22814 http://www.redhat.com/support/errata/RHSA-2007-0909.html http://www.securityfocus.com/archive/1/461897/100/0/threaded http://lists.grok.org.uk/pipermail/full-disclosure/2007-March/052793.html http://www.vupen.com/english/advisories/2007/0886	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2007-0537`	vulnerable	2026-06-03 14:27:57.308869	Details available The KDE HTML library (kdelibs), as used by Konqueror 3.5.5, does not properly parse HTML comments, which allows remote attackers to conduct cross-site scripting (XSS) attacks and bypass some XSS protection schemes by embedding certain HTML tags within a comment in a title tag, a related issue to CVE-2007-0478. Published: 2007-01-29T16:00:00.000Z Updated: 2024-08-07T12:19:30.546Z Open on db.gcve.eu Reference links http://www.redhat.com/support/errata/RHSA-2007-0909.html http://www.mandriva.com/security/advisories?name=MDKSA-2007:157 http://secunia.com/advisories/24889 http://secunia.com/advisories/23932 http://www.novell.com/linux/security/advisories/2007_6_sr.html	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.