CVE-2007-0537
The KDE HTML library (kdelibs), as used by Konqueror 3.5.5, does not properly parse HTML comments...
The KDE HTML library (kdelibs), as used by Konqueror 3.5.5, does not properly parse HTML comments, which allows remote attackers to conduct cross-site scripting (XSS) attacks and bypass some XSS protection schemes by embedding certain HTML tags within a comment in a title tag, a related issue to CVE-2007-0478.
Exploit likelihood
What each source reports
NVD Score used
The KDE HTML library (kdelibs), as used by Konqueror 3.5.5, does not properly parse HTML comments, which allows remote attackers to conduct cross-site scripting (XSS) attacks and bypass some XSS protection schemes by embedding certain HTML tags within a comment in a title tag, a related issue to CVE-2007-0478.
- Record
CVE-2007-0537- CVSS 2.0
- 2.6 Low
AV:N/AC:H/Au:N/C:N/I:P/A:N - Weakness
- CWE-79
- Updated
- 2026-11-02
CVE List No score
The KDE HTML library (kdelibs), as used by Konqueror 3.5.5, does not properly parse HTML comments, which allows remote attackers to conduct cross-site scripting (XSS) attacks and bypass some XSS protection schemes by embedding certain HTML tags within a comment in a title tag, a related issue to CVE-2007-0478.
- Record
CVE-2007-0537- Updated
- 2026-11-02
EUVDEUVD-2007-0535 No score
The KDE HTML library (kdelibs), as used by Konqueror 3.5.5, does not properly parse HTML comments, which allows remote attackers to conduct cross-site scripting (XSS) attacks and bypass some XSS protection schemes by embedding certain HTML tags within a comment in a title tag, a related issue to CVE-2007-0478.
- Record
EUVD-2007-0535- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-qpw4-qr5r-cjxc No score
The KDE HTML library (kdelibs), as used by Konqueror 3.5.5, does not properly parse HTML comments...
The KDE HTML library (kdelibs), as used by Konqueror 3.5.5, does not properly parse HTML comments, which allows remote attackers to conduct cross-site scripting (XSS) attacks and bypass some XSS protection schemes by embedding certain HTML tags within a comment in a title tag, a related issue to CVE-2007-0478.
- Record
GHSA-qpw4-qr5r-cjxc- Weakness
- CWE-79
- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
kdelibsRed Hat:enterprise_linux:4::as From an advisory covering 6 CVEs |
before 6:3.3.1-9.el4 | 6:3.3.1-9.el4 |
kdelibs-debuginfoRed Hat:enterprise_linux:4::as From an advisory covering 6 CVEs |
before 6:3.3.1-9.el4 | 6:3.3.1-9.el4 |
kdelibs-develRed Hat:enterprise_linux:4::as From an advisory covering 6 CVEs |
before 6:3.3.1-9.el4 | 6:3.3.1-9.el4 |
kdelibsRed Hat:enterprise_linux:4::desktop From an advisory covering 6 CVEs |
before 6:3.3.1-9.el4 | 6:3.3.1-9.el4 |
kdelibs-debuginfoRed Hat:enterprise_linux:4::desktop From an advisory covering 6 CVEs |
before 6:3.3.1-9.el4 | 6:3.3.1-9.el4 |
kdelibs-develRed Hat:enterprise_linux:4::desktop From an advisory covering 6 CVEs |
before 6:3.3.1-9.el4 | 6:3.3.1-9.el4 |
kdelibsRed Hat:enterprise_linux:4::es From an advisory covering 6 CVEs |
before 6:3.3.1-9.el4 | 6:3.3.1-9.el4 |
kdelibs-debuginfoRed Hat:enterprise_linux:4::es From an advisory covering 6 CVEs |
before 6:3.3.1-9.el4 | 6:3.3.1-9.el4 |
kdelibs-develRed Hat:enterprise_linux:4::es From an advisory covering 6 CVEs |
before 6:3.3.1-9.el4 | 6:3.3.1-9.el4 |
kdelibsRed Hat:enterprise_linux:4::ws From an advisory covering 6 CVEs |
before 6:3.3.1-9.el4 | 6:3.3.1-9.el4 |
Show 12 moreShow less
| Package | Affected | Fixed |
|---|---|---|
kdelibs-debuginfoRed Hat:enterprise_linux:4::ws From an advisory covering 6 CVEs |
before 6:3.3.1-9.el4 | 6:3.3.1-9.el4 |
kdelibs-develRed Hat:enterprise_linux:4::ws From an advisory covering 6 CVEs |
before 6:3.3.1-9.el4 | 6:3.3.1-9.el4 |
kdelibsRed Hat:enterprise_linux:5::client_workstation From an advisory covering 6 CVEs |
before 6:3.5.4-13.el5 | 6:3.5.4-13.el5 |
kdelibs-debuginfoRed Hat:enterprise_linux:5::client_workstation From an advisory covering 6 CVEs |
before 6:3.5.4-13.el5 | 6:3.5.4-13.el5 |
kdelibs-develRed Hat:enterprise_linux:5::client_workstation From an advisory covering 6 CVEs |
before 6:3.5.4-13.el5 | 6:3.5.4-13.el5 |
kdelibsRed Hat:enterprise_linux:5::client From an advisory covering 6 CVEs |
before 6:3.5.4-13.el5 | 6:3.5.4-13.el5 |
kdelibs-apidocsRed Hat:enterprise_linux:5::client From an advisory covering 6 CVEs |
before 6:3.5.4-13.el5 | 6:3.5.4-13.el5 |
kdelibs-debuginfoRed Hat:enterprise_linux:5::client From an advisory covering 6 CVEs |
before 6:3.5.4-13.el5 | 6:3.5.4-13.el5 |
kdelibsRed Hat:enterprise_linux:5::server From an advisory covering 6 CVEs |
before 6:3.5.4-13.el5 | 6:3.5.4-13.el5 |
kdelibs-apidocsRed Hat:enterprise_linux:5::server From an advisory covering 6 CVEs |
before 6:3.5.4-13.el5 | 6:3.5.4-13.el5 |
kdelibs-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 6 CVEs |
before 6:3.5.4-13.el5 | 6:3.5.4-13.el5 |
kdelibs-develRed Hat:enterprise_linux:5::server From an advisory covering 6 CVEs |
before 6:3.5.4-13.el5 | 6:3.5.4-13.el5 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2007-0537 is a low vulnerability (CVSS 2.6) in Kde Konqueror, published January 29, 2007. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.90%, the 79th percentile. No source names a fixed version.
References
redhat.com/support/errata/RHSA-2007-0909.html
mandriva.com/security/advisories?name=MDKSA-2007:157
secunia.com/advisories/24889
novell.com/linux/security/advisories/2007_6_sr.html
kde.org/info/security/advisory-20070206-1.txt
Show 43 moreShow less
osvdb.org/32975
gentoo.org/security/en/glsa/glsa-200703-10.xml
securityfocus.com/archive/1/457924/100/0/threaded
ubuntu.com/usn/usn-420-1
issues.rpath.com/browse/RPL-1117
securitytracker.com/id?1017591
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10244
vupen.com/english/advisories/2007/0505
nvd.nist.gov/vuln/detail/CVE-2007-0537
github.com/advisories/GHSA-qpw4-qr5r-cjxc
access.redhat.com/errata/RHSA-2007:0909
bugzilla.redhat.com/show_bug.cgi?id=229606
security.access.redhat.com/data/csaf/v2/advisories/2007/rhsa-2007_0909.json
cve.org/CVERecord?id=CVE-2007-0242