CVE-2004-0527

KDE Konqueror 2.1.1 and 2.2.2 allows remote attackers to spoof a legitimate URL in the status bar via A HREF tags with modified "alt" values that point to the legitimate site, combined with an image map whose href points to the malicious site, which facilitates a "phishing" attack.

CVSS v2.0 5.0 MEDIUM

5.0^/10

CVSS v2.0 : MEDIUM

Vector : AV:N/AC:L/Au:N/C:N/I:P/A:N

Exploitability : 10.0 / Impact : 2.9

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact NONE

Integrity Impact PARTIAL

Availability Impact NONE

References

Link	Resource
http://www.osvdb.org/6579
http://www.securityfocus.com/bid/10383	Exploit Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/16102
http://www.osvdb.org/6579
http://www.securityfocus.com/bid/10383	Exploit Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/16102

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:kde:konqueror:2.1.1:::::::*
	cpe:2.3:a:kde:konqueror:2.2.2:::::::*
	cpe:2.3:a:kde:konqueror:3.0:::::::*
	cpe:2.3:a:kde:konqueror:3.0.1:::::::*
	cpe:2.3:a:kde:konqueror:3.0.2:::::::*
	cpe:2.3:a:kde:konqueror:3.0.3:::::::*
	cpe:2.3:a:kde:konqueror:3.0.5:::::::*
	cpe:2.3:a:kde:konqueror:3.1:::::::*
	cpe:2.3:a:kde:konqueror:3.1.1:::::::*
	cpe:2.3:a:kde:konqueror:3.1.2:::::::*
	cpe:2.3:a:kde:konqueror:3.1.3:::::::*
	cpe:2.3:a:kde:konqueror:3.2.1:::::::*

History

20 Nov 2024, 23:48

Type	Values Removed	Values Added
References	~~() http://www.osvdb.org/6579 -~~	() http://www.osvdb.org/6579 -
References	~~() http://www.securityfocus.com/bid/10383 - Exploit, Vendor Advisory~~	() http://www.securityfocus.com/bid/10383 - Exploit, Vendor Advisory
References	~~() https://exchange.xforce.ibmcloud.com/vulnerabilities/16102 -~~	() https://exchange.xforce.ibmcloud.com/vulnerabilities/16102 -

Information

Published : 2004-08-06 04:00

Updated : 2024-11-20 23:48

NVD link : CVE-2004-0527

Mitre link : CVE-2004-0527

CVE.ORG link : CVE-2004-0527

JSON object : View

Products Affected

kde

konqueror

CWE

NVD-CWE-Other

{"id": "CVE-2004-0527", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 5.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:N/I:P/A:N", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "NONE"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2004-08-06T04:00:00.000", "references": [{"url": "http://www.osvdb.org/6579", "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/10383", "tags": ["Exploit", "Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/16102", "source": "cve@mitre.org"}, {"url": "http://www.osvdb.org/6579", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.securityfocus.com/bid/10383", "tags": ["Exploit", "Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/16102", "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-Other"}]}], "descriptions": [{"lang": "en", "value": "KDE Konqueror 2.1.1 and 2.2.2 allows remote attackers to spoof a legitimate URL in the status bar via A HREF tags with modified \"alt\" values that point to the legitimate site, combined with an image map whose href points to the malicious site, which facilitates a \"phishing\" attack."}, {"lang": "es", "value": "KDE Konqueror 2.1.1 y 2.2.2 permiten a atacantes remotos suplantar URL leg\u00edtimas en la barra de estado mediante etiquetas A HREF con valores \"alt\" modificados que apuntan al sitio leg\u00edtimo, combinado con un mapa de imagen cuyo HREF apunta al sitio malicioso, lo que facilita ataques de suplantaci\u00f3n para robo de datos (phising)\"."}], "lastModified": "2024-11-20T23:48:47.597", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:kde:konqueror:2.1.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "417F34FB-A6B0-4090-BDC9-6D4C1BF0D3D2"}, {"criteria": "cpe:2.3:a:kde:konqueror:2.2.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D435E39F-4F70-481B-9225-B072B79BEB69"}, {"criteria": "cpe:2.3:a:kde:konqueror:3.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8AD68BAB-8945-4A22-938E-12C01D0111D0"}, {"criteria": "cpe:2.3:a:kde:konqueror:3.0.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7B3220BF-B0AF-4C90-89BD-B425EE58021D"}, {"criteria": "cpe:2.3:a:kde:konqueror:3.0.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "FA53FB7A-AF7F-45B2-AF23-11B1FC4EC289"}, {"criteria": "cpe:2.3:a:kde:konqueror:3.0.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "619EB7F6-8694-4344-A4C9-A35DA58391AB"}, {"criteria": "cpe:2.3:a:kde:konqueror:3.0.5:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7FED2DFC-592C-4FD3-B0B7-C670C78F56DA"}, {"criteria": "cpe:2.3:a:kde:konqueror:3.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0F7BAE27-7AB1-4DBD-98AD-6109F0D9A458"}, {"criteria": "cpe:2.3:a:kde:konqueror:3.1.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "AF8A54F6-96A9-44B8-97C8-50DA7276708D"}, {"criteria": "cpe:2.3:a:kde:konqueror:3.1.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1001754B-8EDB-41A2-9D5D-6E2A2B556DD0"}, {"criteria": "cpe:2.3:a:kde:konqueror:3.1.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C8D57D87-3E6A-4A73-85BA-EE679E9DA8D2"}, {"criteria": "cpe:2.3:a:kde:konqueror:3.2.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0172B167-5780-4F80-ACC9-2FB8B60D6717"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}