| Package | Affected versions | Patched versions |
|---|---|---|
| konqueror | = 2.1.1= 2.1.2= 2.2.1= 2.2.2= 3.0= 3.0.1= 3.0.2= 3.0.3= 3.0.5= 3.0.5b= 3.1= 3.1.1= 3.1.2= 3.1.3= 3.1.4= 3.1.5= 3.2.1= 3.2.2.6= 3.2.3= 3.3= 3.3.1= 3.3.2 |
Konqueror 3.x up to 3.2.2-6, and possibly other versions, allows remote attackers to spoof arbitrary web sites by injecting content from one window into a target window or tab whose name is known but resides in a different domain, as demonstrated using a pop-up window on a trusted web site, aka the "window injection" vulnerability.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free