CVE-2007-4224
KDE Konqueror 3.5.7 allows remote attackers to spoof the URL address bar by calling setInterval...
KDE Konqueror 3.5.7 allows remote attackers to spoof the URL address bar by calling setInterval with a small interval and changing the window.location property.
Exploit likelihood
What each source reports
NVD Score used
4.3
KDE Konqueror 3.5.7 allows remote attackers to spoof the URL address bar by calling setInterval with a small interval and changing the window.location property.
- Record
CVE-2007-4224- CVSS 2.0
- 4.3 Medium
AV:N/AC:M/Au:N/C:N/I:P/A:N - Weakness
- CWE-59
- Updated
- 2026-11-02
CVE List No score
KDE Konqueror 3.5.7 allows remote attackers to spoof the URL address bar by calling setInterval with a small interval and changing the window.location property.
- Record
CVE-2007-4224- Updated
- 2026-11-02
EUVDEUVD-2007-4207 No score
KDE Konqueror 3.5.7 allows remote attackers to spoof the URL address bar by calling setInterval with a small interval and changing the window.location property.
- Record
EUVD-2007-4207- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-pxp9-fmhc-vjvg No score
KDE Konqueror 3.5.7 allows remote attackers to spoof the URL address bar by calling setInterval...
KDE Konqueror 3.5.7 allows remote attackers to spoof the URL address bar by calling setInterval with a small interval and changing the window.location property.
- Record
GHSA-pxp9-fmhc-vjvg- Weakness
- CWE-59
- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
kdebaseRed Hat:enterprise_linux:4::as From an advisory covering 3 CVEs |
before 6:3.3.1-6.el4 | 6:3.3.1-6.el4 |
kdebase-debuginfoRed Hat:enterprise_linux:4::as From an advisory covering 3 CVEs |
before 6:3.3.1-6.el4 | 6:3.3.1-6.el4 |
kdebase-develRed Hat:enterprise_linux:4::as From an advisory covering 3 CVEs |
before 6:3.3.1-6.el4 | 6:3.3.1-6.el4 |
kdebaseRed Hat:enterprise_linux:4::desktop From an advisory covering 3 CVEs |
before 6:3.3.1-6.el4 | 6:3.3.1-6.el4 |
kdebase-debuginfoRed Hat:enterprise_linux:4::desktop From an advisory covering 3 CVEs |
before 6:3.3.1-6.el4 | 6:3.3.1-6.el4 |
kdebase-develRed Hat:enterprise_linux:4::desktop From an advisory covering 3 CVEs |
before 6:3.3.1-6.el4 | 6:3.3.1-6.el4 |
kdebaseRed Hat:enterprise_linux:4::es From an advisory covering 3 CVEs |
before 6:3.3.1-6.el4 | 6:3.3.1-6.el4 |
kdebase-debuginfoRed Hat:enterprise_linux:4::es From an advisory covering 3 CVEs |
before 6:3.3.1-6.el4 | 6:3.3.1-6.el4 |
kdebase-develRed Hat:enterprise_linux:4::es From an advisory covering 3 CVEs |
before 6:3.3.1-6.el4 | 6:3.3.1-6.el4 |
kdebaseRed Hat:enterprise_linux:4::ws From an advisory covering 3 CVEs |
before 6:3.3.1-6.el4 | 6:3.3.1-6.el4 |
Show 32 moreShow less
| Package | Affected | Fixed |
|---|---|---|
kdebase-debuginfoRed Hat:enterprise_linux:4::ws From an advisory covering 3 CVEs |
before 6:3.3.1-6.el4 | 6:3.3.1-6.el4 |
kdebase-develRed Hat:enterprise_linux:4::ws From an advisory covering 3 CVEs |
before 6:3.3.1-6.el4 | 6:3.3.1-6.el4 |
kdebaseRed Hat:enterprise_linux:5::client_workstation From an advisory covering 3 CVEs |
before 6:3.5.4-15.el5 | 6:3.5.4-15.el5 |
kdebase-debuginfoRed Hat:enterprise_linux:5::client_workstation From an advisory covering 3 CVEs |
before 6:3.5.4-15.el5 | 6:3.5.4-15.el5 |
kdebase-develRed Hat:enterprise_linux:5::client_workstation From an advisory covering 3 CVEs |
before 6:3.5.4-15.el5 | 6:3.5.4-15.el5 |
kdebaseRed Hat:enterprise_linux:5::client From an advisory covering 3 CVEs |
before 6:3.5.4-15.el5 | 6:3.5.4-15.el5 |
kdebase-debuginfoRed Hat:enterprise_linux:5::client From an advisory covering 3 CVEs |
before 6:3.5.4-15.el5 | 6:3.5.4-15.el5 |
kdebaseRed Hat:enterprise_linux:5::server From an advisory covering 3 CVEs |
before 6:3.5.4-15.el5 | 6:3.5.4-15.el5 |
kdebase-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 3 CVEs |
before 6:3.5.4-15.el5 | 6:3.5.4-15.el5 |
kdebase-develRed Hat:enterprise_linux:5::server From an advisory covering 3 CVEs |
before 6:3.5.4-15.el5 | 6:3.5.4-15.el5 |
kdelibsRed Hat:enterprise_linux:4::as From an advisory covering 6 CVEs |
before 6:3.3.1-9.el4 | 6:3.3.1-9.el4 |
kdelibs-debuginfoRed Hat:enterprise_linux:4::as From an advisory covering 6 CVEs |
before 6:3.3.1-9.el4 | 6:3.3.1-9.el4 |
kdelibs-develRed Hat:enterprise_linux:4::as From an advisory covering 6 CVEs |
before 6:3.3.1-9.el4 | 6:3.3.1-9.el4 |
kdelibsRed Hat:enterprise_linux:4::desktop From an advisory covering 6 CVEs |
before 6:3.3.1-9.el4 | 6:3.3.1-9.el4 |
kdelibs-debuginfoRed Hat:enterprise_linux:4::desktop From an advisory covering 6 CVEs |
before 6:3.3.1-9.el4 | 6:3.3.1-9.el4 |
kdelibs-develRed Hat:enterprise_linux:4::desktop From an advisory covering 6 CVEs |
before 6:3.3.1-9.el4 | 6:3.3.1-9.el4 |
kdelibsRed Hat:enterprise_linux:4::es From an advisory covering 6 CVEs |
before 6:3.3.1-9.el4 | 6:3.3.1-9.el4 |
kdelibs-debuginfoRed Hat:enterprise_linux:4::es From an advisory covering 6 CVEs |
before 6:3.3.1-9.el4 | 6:3.3.1-9.el4 |
kdelibs-develRed Hat:enterprise_linux:4::es From an advisory covering 6 CVEs |
before 6:3.3.1-9.el4 | 6:3.3.1-9.el4 |
kdelibsRed Hat:enterprise_linux:4::ws From an advisory covering 6 CVEs |
before 6:3.3.1-9.el4 | 6:3.3.1-9.el4 |
kdelibs-debuginfoRed Hat:enterprise_linux:4::ws From an advisory covering 6 CVEs |
before 6:3.3.1-9.el4 | 6:3.3.1-9.el4 |
kdelibs-develRed Hat:enterprise_linux:4::ws From an advisory covering 6 CVEs |
before 6:3.3.1-9.el4 | 6:3.3.1-9.el4 |
kdelibsRed Hat:enterprise_linux:5::client_workstation From an advisory covering 6 CVEs |
before 6:3.5.4-13.el5 | 6:3.5.4-13.el5 |
kdelibs-debuginfoRed Hat:enterprise_linux:5::client_workstation From an advisory covering 6 CVEs |
before 6:3.5.4-13.el5 | 6:3.5.4-13.el5 |
kdelibs-develRed Hat:enterprise_linux:5::client_workstation From an advisory covering 6 CVEs |
before 6:3.5.4-13.el5 | 6:3.5.4-13.el5 |
kdelibsRed Hat:enterprise_linux:5::client From an advisory covering 6 CVEs |
before 6:3.5.4-13.el5 | 6:3.5.4-13.el5 |
kdelibs-apidocsRed Hat:enterprise_linux:5::client From an advisory covering 6 CVEs |
before 6:3.5.4-13.el5 | 6:3.5.4-13.el5 |
kdelibs-debuginfoRed Hat:enterprise_linux:5::client From an advisory covering 6 CVEs |
before 6:3.5.4-13.el5 | 6:3.5.4-13.el5 |
kdelibsRed Hat:enterprise_linux:5::server From an advisory covering 6 CVEs |
before 6:3.5.4-13.el5 | 6:3.5.4-13.el5 |
kdelibs-apidocsRed Hat:enterprise_linux:5::server From an advisory covering 6 CVEs |
before 6:3.5.4-13.el5 | 6:3.5.4-13.el5 |
kdelibs-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 6 CVEs |
before 6:3.5.4-13.el5 | 6:3.5.4-13.el5 |
kdelibs-develRed Hat:enterprise_linux:5::server From an advisory covering 6 CVEs |
before 6:3.5.4-13.el5 | 6:3.5.4-13.el5 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2007-4224 is a medium vulnerability (CVSS 4.3) in Kde Konqueror, published August 8, 2007. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.83%, the 79th percentile. No source names a fixed version.
References
redhat.com/support/errata/RHSA-2007-0909.html
securityreason.com/securityalert/2982
secunia.com/advisories/27271
redhat.com/archives/fedora-package-announce/2007-October/msg00085.html
redhat.com/archives/fedora-package-announce/2007-October/msg00022.html
securityfocus.com/archive/1/475731/100/0/threaded
Show 59 moreShow less
redhat.com/support/errata/RHSA-2007-0905.html
ubuntu.com/usn/usn-502-1
securityfocus.com/archive/1/475730/100/0/threaded
exchange.xforce.ibmcloud.com/vulnerabilities/35828
vupen.com/english/advisories/2007/2807
secunia.com/advisories/27106
secunia.com/advisories/27108
secunia.com/advisories/26351
securityfocus.com/bid/25219
secunia.com/advisories/26690
securitytracker.com/id?1018579
secunia.com/advisories/27090
lists.opensuse.org/opensuse-security-announce/2007-10/msg00006.html
secunia.com/advisories/27089
secunia.com/advisories/26612
secunia.com/advisories/27096
secunia.com/advisories/26720
issues.rpath.com/browse/RPL-1615
mandriva.com/security/advisories?name=MDKSA-2007:176
lists.grok.org.uk/pipermail/full-disclosure/2007-August/065101.html
kde.org/info/security/advisory-20070816-1.txt
securityfocus.com/archive/1/475763/100/0/threaded
securityfocus.com/archive/1/475689/100/0/threaded
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9879
nvd.nist.gov/vuln/detail/CVE-2007-4224
github.com/advisories/GHSA-pxp9-fmhc-vjvg
access.redhat.com/errata/RHSA-2007:0905
access.redhat.com/security/updates/classification
bugzilla.redhat.com/show_bug.cgi?id=248537
bugzilla.redhat.com/show_bug.cgi?id=251708
bugzilla.redhat.com/show_bug.cgi?id=287311
security.access.redhat.com/data/csaf/v2/advisories/2007/rhsa-2007_0905.json
access.redhat.com/security/cve/CVE-2007-3820
cve.org/CVERecord?id=CVE-2007-3820
nvd.nist.gov/vuln/detail/CVE-2007-3820
access.redhat.com/security/cve/CVE-2007-4224
cve.org/CVERecord?id=CVE-2007-4224
access.redhat.com/security/cve/CVE-2007-4569
cve.org/CVERecord?id=CVE-2007-4569
nvd.nist.gov/vuln/detail/CVE-2007-4569
access.redhat.com/errata/RHSA-2007:0909
redhat.com/security/updates/classification
bugzilla.redhat.com/show_bug.cgi?id=229606
bugzilla.redhat.com/show_bug.cgi?id=233592
bugzilla.redhat.com/show_bug.cgi?id=234633
bugzilla.redhat.com/show_bug.cgi?id=299891
security.access.redhat.com/data/csaf/v2/advisories/2007/rhsa-2007_0909.json
access.redhat.com/security/cve/CVE-2007-0242
cve.org/CVERecord?id=CVE-2007-0242
nvd.nist.gov/vuln/detail/CVE-2007-0242
access.redhat.com/security/cve/CVE-2007-0537
cve.org/CVERecord?id=CVE-2007-0537
nvd.nist.gov/vuln/detail/CVE-2007-0537
access.redhat.com/security/cve/CVE-2007-1308
cve.org/CVERecord?id=CVE-2007-1308
nvd.nist.gov/vuln/detail/CVE-2007-1308
access.redhat.com/security/cve/CVE-2007-1564
cve.org/CVERecord?id=CVE-2007-1564
nvd.nist.gov/vuln/detail/CVE-2007-1564