CVE-2004-1158: High severity kde konqueror vulnerability
Konqueror 3.x up to 3.2.2-6, and possibly other versions, allows remote attackers to spoof arbitrary web sites by injecting content from one window into a target window or tab whose name is known but resides in a different domain, as demonstrated using a pop-up window on a trusted web site, aka the "window injection" vulnerability.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2004-1158?
CVE-2004-1158 is considered to have a moderate severity level, as it allows spoofing attacks but requires user interaction.
How do I fix CVE-2004-1158?
To fix CVE-2004-1158, users should upgrade to the latest version of Konqueror that addresses this vulnerability.
What versions of Konqueror are affected by CVE-2004-1158?
CVE-2004-1158 affects Konqueror versions up to 3.2.2-6 and possibly other earlier versions.
What type of attack is associated with CVE-2004-1158?
CVE-2004-1158 is related to window injection attacks, allowing remote attackers to spoof web content.
Can CVE-2004-1158 affect my browsing experience?
Yes, CVE-2004-1158 can affect your browsing experience by misleading you into entering sensitive information on spoofed sites.