CVE-2007-0537
Fixed in a distro release EPSS 2%
The KDE HTML library (kdelibs), as used by Konqueror 3.5.5, does not properly parse HTML comments, which allows remote attackers to conduct cross-site scripting (XSS) attacks and bypass some XSS protection schemes by embedding certain HTML tags within a comment in a title tag, a related issue to CVE-2007-0478.
Products: kde konqueror
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Red Hat Enterprise Linux 4 | kdelibs | 6:3.3.1-9.el4 |
| Red Hat Enterprise Linux 4 | kdelibs-debuginfo | 6:3.3.1-9.el4 |
| Red Hat Enterprise Linux 4 | kdelibs-devel | 6:3.3.1-9.el4 |
| Red Hat Enterprise Linux 5 | kdelibs | 6:3.5.4-13.el5 |
| Red Hat Enterprise Linux 5 | kdelibs-apidocs | 6:3.5.4-13.el5 |
| Red Hat Enterprise Linux 5 | kdelibs-debuginfo | 6:3.5.4-13.el5 |
| Red Hat Enterprise Linux 5 | kdelibs-devel | 6:3.5.4-13.el5 |