NVD

Id
71548  
Name
CVE-2004-1158  
Description
Konqueror 3.x up to 3.2.2-6, and possibly other versions, allows remote attackers to spoof arbitrary web sites by injecting content from one window into a target window or tab whose name is known but resides in a different domain, as demonstrated using a pop-up window on a trusted web site, aka the "window injection" vulnerability.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2016-12-20  
Published
2005-01-10  
Modified Date
2016-11-18  
Seq
2004-1158  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
370102 71548 CVE-2004-1158 20041213 KDE Security Advisory: Konqueror Window Injection Vulnerability  View
370103 71548 CVE-2004-1158 oval:org.mitre.oval:def:11056  View
370104 71548 CVE-2004-1158 http://www.kde.org/info/security/advisory-20041213-1.txt  View
370105 71548 CVE-2004-1158 SUSE-SR:2005:001  View
370106 71548 CVE-2004-1158 RHSA-2005:009  View
370107 71548 CVE-2004-1158 11853  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
63176 JVNDB-2004-000518 KDE Konqueror のクロスドメインセキュリティチェック機能におけるコンテンツ表示を制御される脆弱性 ------------ CVE-2004-1158 9585 CVE-2004-1158 71548 7.5 http://jvndb.jvn.jp/ja/contents/2004/JVNDB-2004-000518.html 2004-12-08 2007-04-01 View