NVD

Id
52761  
Name
CVE-2007-0537  
Description
The KDE HTML library (kdelibs), as used by Konqueror 3.5.5, does not properly parse HTML comments, which allows remote attackers to conduct cross-site scripting (XSS) attacks and bypass some XSS protection schemes by embedding certain HTML tags within a comment in a title tag, a related issue to CVE-2007-0478.  
Reject
 
CVSS Version
2  
CVSS Score
2.6  
Severity
Low  
CVSS Base Score
2.6  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
4.9  
CVSS Vector
(AV:N/AC:H/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-07  
Published
2007-01-29  
Modified Date
2011-10-11  
Seq
2007-0537  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
266680 52761 CVE-2007-0537 oval:org.mitre.oval:def:10244  View
266681 52761 CVE-2007-0537 1017591  View
266682 52761 CVE-2007-0537 GLSA-200703-10  View
266683 52761 CVE-2007-0537 http://www.kde.org/info/security/advisory-20070206-1.txt  View
266684 52761 CVE-2007-0537 MDKSA-2007:031  View
266685 52761 CVE-2007-0537 MDKSA-2007:157  View
266686 52761 CVE-2007-0537 SUSE-SR:2007:006  View
266687 52761 CVE-2007-0537 RHSA-2007:0909  View
266688 52761 CVE-2007-0537 20070124 Re: Safari Improperly Parses HTML Documents & BlogSpot XSS vulnerability  View
266689 52761 CVE-2007-0537 22428  View
266690 52761 CVE-2007-0537 USN-420-1  View
266691 52761 CVE-2007-0537 ADV-2007-0505  View
266692 52761 CVE-2007-0537 https://issues.rpath.com/browse/RPL-1117  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
51559 JVNDB-2007-000221 KDE kdelibs のタイトルタグによるクロスサイトスクリプティングの脆弱性 KDE Konqueror ブラウザ等で利用される HTML ライブラリ kdelibs には、不適切な HTML コメントの処理によりクロスサイトスクリプティングの脆弱性が存在します。 攻撃者はタイトルタグのコメントに HTML タグをを埋め込むことで、特定のクロスサイトスクリプティング攻撃の保護スキームを回避します。 CVE-2007-0537 23892 CVE-2007-0537 52761 4.3 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-000221.html 2007-02-06 2007-12-05 View