QwikSec

Security Database

CVE

CWE

Training

CVE-2004-0721

Published: Jul 23, 2004

Modified: Aug 8, 2024

PUBLISHED

Description

Konqueror 3.1.3, 3.2.2, and possibly other versions does not properly prevent a frame in one domain from injecting content into a frame that belongs to another domain, which facilitates web site spoofing and other attacks, aka the frame injection vulnerability.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

http-frame-spoof(1598)

vdb-entry

x_refsource_XF

vendor-advisory

x_refsource_CONECTIVA

third-party-advisory

x_refsource_SECUNIA

oval:org.mitre.oval:def:11371

vdb-entry

signature

x_refsource_OVAL

http://www.kde.org/info/security/advisory-20040811-3.txt

x_refsource_CONFIRM

vendor-advisory

x_refsource_GENTOO

20040811 KDE Security Advisories: Temporary File and Konqueror Frame Injection Vulnerabilities

mailing-list

x_refsource_BUGTRAQ

http://secunia.com/multiple_browsers_frame_injection_vulnerability_test/

x_refsource_MISC

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.