CVE-2007-4225

MEDIUM 6.8CVE-2007-4225 · Published 08/08/2007 · updated 16/06/2026

In short

CVE-2007-4225 is a MEDIUM (CVSS 6.8) vulnerability affecting konqueror (kde).
Chance of exploitation in the next 30 days (EPSS): 2.0%, higher than 80.3% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
konqueror kde	`= 3.5.7`	No fix yet

Description

Visual truncation vulnerability in KDE Konqueror 3.5.7 allows remote attackers to spoof the URL address bar via an http URI with a large amount of whitespace in the user/password portion.

References

lists.grok.org.uk/pipermail/full-disclosure/2007-August/065101.html
secunia.com/advisories/26351
secunia.com/advisories/26612
secunia.com/advisories/26690
secunia.com/advisories/26720
secunia.com/advisories/27089
secunia.com/advisories/27096
securityreason.com/securityalert/2982
securitytracker.com/id
kde.org/info/security/advisory-20070816-1.txt
mandriva.com/security/advisories
ubuntu.com/usn/usn-502-1
vupen.com/english/advisories/2007/2807
exchange.xforce.ibmcloud.com/vulnerabilities/35829
issues.rpath.com/browse/RPL-1615
redhat.com/archives/fedora-package-announce/2007-October/msg00022.html

More vulnerabilities in konqueror

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free