Approved changes feed: RSS · Atom

cpe:2.3:a:kde:konqueror:3.5.9:*:*:*:*:*:*:*

part: a version: 3.5.9 update: *

VendorKde (d8ba08cf-7ec1-5504-a5b9-f8cfa50ca850)
ProductKonqueror (4f2f5ab6-c769-5e47-9418-f0068486a5d8)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:deb/debian/konqueror purl2cpe 2026-06-01 10:14:04.943823
pkg:deb/ubuntu/konqueror purl2cpe 2026-06-01 10:14:04.943825
pkg:github/kde/konqueror purl2cpe 2026-06-01 10:14:04.943826
pkg:rpm/fedora/konqueror purl2cpe 2026-06-01 10:14:04.943828
pkg:rpm/opensuse/konqueror purl2cpe 2026-06-01 10:14:04.943829

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2008-5712 vulnerable 2026-06-03 14:29:10.738038 Details available
The HTML parser in KDE Konqueror 3.5.9 allows remote attackers to cause a denial of service (application crash) via (1) a long COLOR attribute in an HR element; or a long (a) BGCOLOR or (b) BORDERCOLOR attribute in a (2) TABLE, (3) TD, or (4) TR element. NOTE: the FONT vector is already covered by CVE-2008-4514.
Published: 2008-12-24T17:00:00.000Z
Updated: 2024-08-07T11:04:44.178Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-4382 vulnerable 2026-06-03 14:28:57.974388 Details available
Konqueror in KDE 3.5.9 allows remote attackers to cause a denial of service (application crash) via Javascript that calls the alert function with a URL-encoded string of a large number of invalid characters.
Published: 2008-10-02T18:00:00.000Z
Updated: 2024-08-07T10:17:08.992Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.