Konqueror 3.x up to 3.2.2-6, and possibly other versions, allows remote attackers to spoof arbitrary web sites by injecting content from one window into a target window or tab whose name is known but resides in a different domain, as demonstrated using a pop-up window on a trusted web site, aka the "window injection" vulnerability.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Freebsd | — | Upgrade pt_BR-netscape7Upgrade linux-phoenixUpgrade netscape7Upgrade ja-linux-netscapeUpgrade zhCN-linux-mozillafirebirdUpgrade kdebaseUpgrade mozilla-gtk1Upgrade mozilla-embeddedUpgrade mozilla-thunderbirdUpgrade zhTW-linux-mozillafirebirdUpgrade linux-mozillaUpgrade ru-linux-mozillafirebirdUpgrade mozilla-gtk2Upgrade firefoxUpgrade ja-netscape7Upgrade mozilla-firebirdUpgrade el-linux-mozillafirebirdUpgrade mozilla-gtkUpgrade ja-mozillafirebird-gtk2Upgrade mozilla+ipv6Upgrade fr-netscape7Upgrade de-linux-netscapeUpgrade mozillaUpgrade opera-develUpgrade linux-operaUpgrade phoenixUpgrade kdelibsUpgrade linux-mozillafirebirdUpgrade fr-linux-netscapeUpgrade de-linux-mozillafirebirdUpgrade ja-linux-mozillafirebird-gtk1Upgrade linux-mozilla-develUpgrade de-netscape7Upgrade operaUpgrade linux-netscape | Dec 10, 2025 | Jan 24, 2005 |
| Suse | — | Upgrade kdebase3-32bitUpgrade kdelibs3-32bitUpgrade kdebase3Upgrade kdelibs3-64bitUpgrade kdelibs3Upgrade kdebase3-x86Upgrade kdebase3-64bitUpgrade kdelibs3-x86 | Feb 17, 2015 | Jan 10, 2005 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub