Approved changes feed: RSS · Atom

cpe:2.3:a:kde:konqueror:3.95.00:*:*:*:*:*:*:*

part: a version: 3.95.00 update: *

VendorKde (d8ba08cf-7ec1-5504-a5b9-f8cfa50ca850)
ProductKonqueror (4f2f5ab6-c769-5e47-9418-f0068486a5d8)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:deb/debian/konqueror purl2cpe 2026-06-01 10:14:04.945550
pkg:deb/ubuntu/konqueror purl2cpe 2026-06-01 10:14:04.945552
pkg:github/kde/konqueror purl2cpe 2026-06-01 10:14:04.945553
pkg:rpm/fedora/konqueror purl2cpe 2026-06-01 10:14:04.945555
pkg:rpm/opensuse/konqueror purl2cpe 2026-06-01 10:14:04.945556

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2007-6591 vulnerable 2026-06-03 14:28:30.022481 Details available
KDE Konqueror 3.5.5 and 3.95.00, when a user accepts an SSL server certificate on the basis of the CN domain name in the DN field, regards the certificate as also accepted for all domain names in subjectAltName:dNSName fields, even though these fields cannot be examined in the product, which makes it easier for remote attackers to trick a user into accepting an invalid certificate for a spoofed web site.
Published: 2007-12-28T21:00:00.000Z
Updated: 2024-08-07T16:11:06.084Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.