CVE-2007-4225

Severity: medium (CVSS 6.8 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.0% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2007-08-08 · updated 2026-06-16

Description

Visual truncation vulnerability in KDE Konqueror 3.5.7 allows remote attackers to spoof the URL address bar via an http URI with a large amount of whitespace in the user/password portion.

Affected products

KDE Konqueror: 3.5.7

References

http://lists.grok.org.uk/pipermail/full-disclosure/2007-August/065101.html
http://secunia.com/advisories/26351
http://secunia.com/advisories/26612
http://secunia.com/advisories/26690
http://secunia.com/advisories/26720
http://secunia.com/advisories/27089
http://secunia.com/advisories/27096
http://securityreason.com/securityalert/2982
http://securitytracker.com/id?1018579
http://www.kde.org/info/security/advisory-20070816-1.txt
http://www.mandriva.com/security/advisories?name=MDKSA-2007:176
http://www.ubuntu.com/usn/usn-502-1

Get alerted when CVE-2007-4225 or the next vulnerability affects your stack