CVE-2007-4224: kde konqueror Link Following

EPSS trend

Probability

1.83%

Chance of exploitation in the next 30 days

Percentile

79%

Versus all other CVEs

30-day change

0.00 pp

From 1.83% on 18-09-2026

18-09-202618-10-2026

EPSS score

1.83%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

References

30 links

www.redhat.com/support/errata/RHSA-2007-0909.htmlVendor AdvisoryX Refsource REDHAT
securityreason.com/securityalert/2982Third Party AdvisoryX Refsource SREASON
secunia.com/advisories/27271Third Party AdvisoryX Refsource SECUNIA
www.redhat.com/archives/fedora-package-announce/2007-October/msg00085.htmlVendor AdvisoryX Refsource FEDORA
www.redhat.com/archives/fedora-package-announce/2007-October/msg00022.htmlVendor AdvisoryX Refsource FEDORA
www.securityfocus.com/archive/1/475731/100/0/threadedMailing ListX Refsource BUGTRAQ
www.redhat.com/support/errata/RHSA-2007-0905.htmlVendor AdvisoryX Refsource REDHAT
www.ubuntu.com/usn/usn-502-1Vendor AdvisoryX Refsource UBUNTU
www.securityfocus.com/archive/1/475730/100/0/threadedMailing ListX Refsource BUGTRAQ
exchange.xforce.ibmcloud.com/vulnerabilities/35828VDB EntryX Refsource XF

Show all 30 references

www.vupen.com/english/advisories/2007/2807VDB EntryX Refsource VUPEN
secunia.com/advisories/27106Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/27108Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/26351Third Party AdvisoryX Refsource SECUNIA
www.securityfocus.com/bid/25219VDB EntryX Refsource BID
secunia.com/advisories/26690Third Party AdvisoryX Refsource SECUNIA
securitytracker.com/id?1018579VDB EntryX Refsource SECTRACK
secunia.com/advisories/27090Third Party AdvisoryX Refsource SECUNIA
lists.opensuse.org/opensuse-security-announce/2007-10/msg00006.htmlVendor AdvisoryX Refsource SUSE
secunia.com/advisories/27089Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/26612Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/27096Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/26720Third Party AdvisoryX Refsource SECUNIA
issues.rpath.com/browse/RPL-1615X Refsource CONFIRM
www.mandriva.com/security/advisories?name=MDKSA-2007:176Vendor AdvisoryX Refsource MANDRIVA
lists.grok.org.uk/pipermail/full-disclosure/2007-August/065101.htmlMailing ListX Refsource FULLDISC
www.kde.org/info/security/advisory-20070816-1.txtX Refsource CONFIRM
www.securityfocus.com/archive/1/475763/100/0/threadedMailing ListX Refsource BUGTRAQ
www.securityfocus.com/archive/1/475689/100/0/threadedMailing ListX Refsource BUGTRAQ
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9879VDB EntrySignatureX Refsource OVAL

Related vulnerabilities

CVE-2003-1478kdekonqueror4.21%18y ago24-10-2007 23:00Konqueror in KDE 3.0.3 allows remote attackers to cause a denial of service (core dump) via a web page that begins with a "xFFxFE" byte sequence and a large number of CRLF sequences, as demonstrated using freeze.htm.CVE-2003-0592debiankdelibs+34.41%22y ago16-03-2004 05:00Konqueror in KDE 3.1.3 and earlier (kdelibs) allows remote attackers to bypass intended cookie access restrictions on a web application via "%2e%2e" (encoded dot dot) directory traversal sequences in a URL, which causes Konqueror to send the cookie outside the specified URL subsets, e.g. to a vulnerable application that runs on the same server as the target application.CVE-2003-0459kdekonqueror+72.90%23y ago01-08-2003 04:00KDE Konqueror for KDE 3.1.2 and earlier does not remove authentication credentials from URLs of the "user:password@host" form in the HTTP-Referer header, which could allow remote web sites to steal the credentials for pages that link to the sites.CVE-2007-2164kdekonqueror1.42%19y ago22-04-2007 19:00Konqueror 3.5.5 release 45.4 allows remote attackers to cause a denial of service (browser crash or abort) via JavaScript that matches a regular expression against a long string, as demonstrated using /(.)*/.CVE-2007-1308kdekonqueror8.44%19y ago07-03-2007 00:00ecma/kjs_html.cpp in KDE JavaScript (KJS), as used in Konqueror in KDE 3.5.5, allows remote attackers to cause a denial of service (crash) by accessing the content of an iframe with an ftp:// URI in the src attribute, probably due to a NULL pointer dereference.CVE-2007-1564kdekonqueror3.90%19y ago21-03-2007 19:00The FTP protocol implementation in Konqueror 3.5.5 allows remote servers to force the client to connect to other servers, perform a proxied port scan, or obtain sensitive information by specifying an alternate server address in an FTP PASV response.

All vulnerabilities inkonqueror

CVE-2007-4224: kde konqueror Link Following

Vulnerability summary

Advisory lineage

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References