CVE-2002-1151: High severity kde konqueror vulnerability
The cross-site scripting protection for Konqueror in KDE 2.2.2 and 3.0 through 3.0.3 does not properly initialize the domains on sub-frames and sub-iframes, which can allow remote attackers to execute script and steal cookies from subframes that are in other domains.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2002-1151?
CVE-2002-1151 is considered a moderate vulnerability due to its potential for cross-site scripting attacks.
How do I fix CVE-2002-1151?
To mitigate CVE-2002-1151, users should update their KDE Konqueror browser to version 3.0.4 or later.
Which versions of KDE Konqueror are affected by CVE-2002-1151?
CVE-2002-1151 affects KDE Konqueror versions 2.2.2 and 3.0 through 3.0.3.
What type of vulnerability is CVE-2002-1151?
CVE-2002-1151 is a cross-site scripting (XSS) vulnerability that allows attackers to execute scripts in the context of another domain.
Can CVE-2002-1151 lead to cookie theft?
Yes, CVE-2002-1151 can allow remote attackers to steal cookies from subframes of other domains.