CVE-2007-0537

LOW 2.6CVE-2007-0537 · Published 29/01/2007 · updated 16/06/2026

In short

CVE-2007-0537 is a LOW (CVSS 2.6) vulnerability affecting konqueror (kde).
Chance of exploitation in the next 30 days (EPSS): 1.9%, higher than 79.7% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
konqueror kde	`= 3.5.5`	No fix yet

Description

The KDE HTML library (kdelibs), as used by Konqueror 3.5.5, does not properly parse HTML comments, which allows remote attackers to conduct cross-site scripting (XSS) attacks and bypass some XSS protection schemes by embedding certain HTML tags within a comment in a title tag, a related issue to CVE-2007-0478.

References

osvdb.org/32975
secunia.com/advisories/23932 · Vendor Advisory
secunia.com/advisories/24013 · Vendor Advisory
secunia.com/advisories/24065 · Vendor Advisory
secunia.com/advisories/24442 · Vendor Advisory
secunia.com/advisories/24463 · Vendor Advisory
secunia.com/advisories/24889 · Vendor Advisory
secunia.com/advisories/27108 · Vendor Advisory
securitytracker.com/id
gentoo.org/security/en/glsa/glsa-200703-10.xml
kde.org/info/security/advisory-20070206-1.txt
mandriva.com/security/advisories
mandriva.com/security/advisories
novell.com/linux/security/advisories/2007_6_sr.html

More vulnerabilities in konqueror

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

konqueror

kde

= 3.5.5

No fix yet

Description

More vulnerabilities in konqueror

See all →