FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

CVE-2004-0721

This CVE name corresponds to:

Entered Topic
2004-08-12 Mutiple browser frame injection vulnerability

The following information is adapted from the Common Vulnerabilities and Exposures (CVE) project. CVE and the CVE logo are trademarks of The MITRE Corporation. CVE content is Copyright 2005, The MITRE Corporation.

Details

Type Candidate
Name CVE-2004-0721
Phase Assigned(20040722)

Description

Konqueror 3.1.3, 3.2.2, and possibly other versions does not properly prevent a frame in one domain from injecting content into a frame that belongs to another domain, which facilitates web site spoofing and other attacks, aka the frame injection vulnerability.

References

Source Reference
OVAL oval:org.mitre.oval:def:11371
SECUNIA 11978
MISC http://secunia.com/multiple_browsers_frame_injection_vulnerability_test/
BUGTRAQ 20040811 KDE Security Advisories: Temporary File and Konqueror Frame Injection Vulnerabilities
CONFIRM http://www.kde.org/info/security/advisory-20040811-3.txt
CONECTIVA CLA-2004:864
GENTOO 200408-13
XF http-frame-spoof(1598)