CVE-2007-0537

Severity: low (CVSS 2.6 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.9% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2007-01-29 · updated 2026-06-16
Weakness: CWE-79

Description

The KDE HTML library (kdelibs), as used by Konqueror 3.5.5, does not properly parse HTML comments, which allows remote attackers to conduct cross-site scripting (XSS) attacks and bypass some XSS protection schemes by embedding certain HTML tags within a comment in a title tag, a related issue to CVE-2007-0478.

Affected products

KDE Konqueror: 3.5.5

References

http://osvdb.org/32975
http://secunia.com/advisories/23932
http://secunia.com/advisories/24013
http://secunia.com/advisories/24065
http://secunia.com/advisories/24442
http://secunia.com/advisories/24463
http://secunia.com/advisories/24889
http://secunia.com/advisories/27108
http://securitytracker.com/id?1017591
http://www.gentoo.org/security/en/glsa/glsa-200703-10.xml
http://www.kde.org/info/security/advisory-20070206-1.txt
http://www.mandriva.com/security/advisories?name=MDKSA-2007:031

Get alerted when CVE-2007-0537 or the next vulnerability affects your stack