CVE-2004-0721
Konqueror 3.1.3, 3.2.2, and possibly other versions does not properly prevent a frame in one...
Konqueror 3.1.3, 3.2.2, and possibly other versions does not properly prevent a frame in one domain from injecting content into a frame that belongs to another domain, which facilitates web site spoofing and other attacks, aka the frame injection vulnerability.
Exploit likelihood
What each source reports
NVD Score used
7.5
Konqueror 3.1.3, 3.2.2, and possibly other versions does not properly prevent a frame in one domain from injecting content into a frame that belongs to another domain, which facilitates web site spoofing and other attacks, aka the frame injection vulnerability.
- Record
CVE-2004-0721- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE List No score
Konqueror 3.1.3, 3.2.2, and possibly other versions does not properly prevent a frame in one domain from injecting content into a frame that belongs to another domain, which facilitates web site spoofing and other attacks, aka the frame injection vulnerability.
- Record
CVE-2004-0721- Updated
- 2026-11-02
EUVDEUVD-2004-0719 No score
Konqueror 3.1.3, 3.2.2, and possibly other versions does not properly prevent a frame in one domain from injecting content into a frame that belongs to another domain, which facilitates web site spoofing and other attacks, aka the frame injection vulnerability.
- Record
EUVD-2004-0719- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-5w5x-24p6-895v No score
Konqueror 3.1.3, 3.2.2, and possibly other versions does not properly prevent a frame in one...
Konqueror 3.1.3, 3.2.2, and possibly other versions does not properly prevent a frame in one domain from injecting content into a frame that belongs to another domain, which facilitates web site spoofing and other attacks, aka the frame injection vulnerability.
- Record
GHSA-5w5x-24p6-895v- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
kdebaseRed Hat:enterprise_linux:3::as From an advisory covering 3 CVEs |
before 6:3.1.3-5.4 | 6:3.1.3-5.4 |
kdebase-debuginfoRed Hat:enterprise_linux:3::as From an advisory covering 3 CVEs |
before 6:3.1.3-5.4 | 6:3.1.3-5.4 |
kdebase-develRed Hat:enterprise_linux:3::as From an advisory covering 3 CVEs |
before 6:3.1.3-5.4 | 6:3.1.3-5.4 |
kdelibsRed Hat:enterprise_linux:3::as From an advisory covering 3 CVEs |
before 6:3.1.3-6.6 | 6:3.1.3-6.6 |
kdelibs-debuginfoRed Hat:enterprise_linux:3::as From an advisory covering 3 CVEs |
before 6:3.1.3-6.6 | 6:3.1.3-6.6 |
kdelibs-develRed Hat:enterprise_linux:3::as From an advisory covering 3 CVEs |
before 6:3.1.3-6.6 | 6:3.1.3-6.6 |
kdebaseRed Hat:enterprise_linux:3::desktop From an advisory covering 3 CVEs |
before 6:3.1.3-5.4 | 6:3.1.3-5.4 |
kdebase-debuginfoRed Hat:enterprise_linux:3::desktop From an advisory covering 3 CVEs |
before 6:3.1.3-5.4 | 6:3.1.3-5.4 |
kdebase-develRed Hat:enterprise_linux:3::desktop From an advisory covering 3 CVEs |
before 6:3.1.3-5.4 | 6:3.1.3-5.4 |
kdelibsRed Hat:enterprise_linux:3::desktop From an advisory covering 3 CVEs |
before 6:3.1.3-6.6 | 6:3.1.3-6.6 |
Show 14 moreShow less
| Package | Affected | Fixed |
|---|---|---|
kdelibs-debuginfoRed Hat:enterprise_linux:3::desktop From an advisory covering 3 CVEs |
before 6:3.1.3-6.6 | 6:3.1.3-6.6 |
kdelibs-develRed Hat:enterprise_linux:3::desktop From an advisory covering 3 CVEs |
before 6:3.1.3-6.6 | 6:3.1.3-6.6 |
kdebaseRed Hat:enterprise_linux:3::es From an advisory covering 3 CVEs |
before 6:3.1.3-5.4 | 6:3.1.3-5.4 |
kdebase-debuginfoRed Hat:enterprise_linux:3::es From an advisory covering 3 CVEs |
before 6:3.1.3-5.4 | 6:3.1.3-5.4 |
kdebase-develRed Hat:enterprise_linux:3::es From an advisory covering 3 CVEs |
before 6:3.1.3-5.4 | 6:3.1.3-5.4 |
kdelibsRed Hat:enterprise_linux:3::es From an advisory covering 3 CVEs |
before 6:3.1.3-6.6 | 6:3.1.3-6.6 |
kdelibs-debuginfoRed Hat:enterprise_linux:3::es From an advisory covering 3 CVEs |
before 6:3.1.3-6.6 | 6:3.1.3-6.6 |
kdelibs-develRed Hat:enterprise_linux:3::es From an advisory covering 3 CVEs |
before 6:3.1.3-6.6 | 6:3.1.3-6.6 |
kdebaseRed Hat:enterprise_linux:3::ws From an advisory covering 3 CVEs |
before 6:3.1.3-5.4 | 6:3.1.3-5.4 |
kdebase-debuginfoRed Hat:enterprise_linux:3::ws From an advisory covering 3 CVEs |
before 6:3.1.3-5.4 | 6:3.1.3-5.4 |
kdebase-develRed Hat:enterprise_linux:3::ws From an advisory covering 3 CVEs |
before 6:3.1.3-5.4 | 6:3.1.3-5.4 |
kdelibsRed Hat:enterprise_linux:3::ws From an advisory covering 3 CVEs |
before 6:3.1.3-6.6 | 6:3.1.3-6.6 |
kdelibs-debuginfoRed Hat:enterprise_linux:3::ws From an advisory covering 3 CVEs |
before 6:3.1.3-6.6 | 6:3.1.3-6.6 |
kdelibs-develRed Hat:enterprise_linux:3::ws From an advisory covering 3 CVEs |
before 6:3.1.3-6.6 | 6:3.1.3-6.6 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2004-0721 is a high vulnerability (CVSS 7.5) in Kde Konqueror, published July 23, 2004. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.62%, the 76th percentile. No source names a fixed version.
References
exchange.xforce.ibmcloud.com/vulnerabilities/1598
distro.conectiva.com.br/atualizacoes?id=a&anuncio=000864
secunia.com/advisories/11978
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11371
kde.org/info/security/advisory-20040811-3.txt
security.gentoo.org/glsa/glsa-200408-13.xml
Show 21 moreShow less
marc.info?l=bugtraq&m=109225538901170&w=2
secunia.com/multiple_browsers_frame_injection_vulnerability_test
nvd.nist.gov/vuln/detail/CVE-2004-0721
github.com/advisories/GHSA-5w5x-24p6-895v
access.redhat.com/errata/RHSA-2004:412
access.redhat.com/security/updates/classification
bugzilla.redhat.com/show_bug.cgi?id=128462
bugzilla.redhat.com/show_bug.cgi?id=128693
bugzilla.redhat.com/show_bug.cgi?id=129228
security.access.redhat.com/data/csaf/v2/advisories/2004/rhsa-2004_412.json
access.redhat.com/security/cve/CVE-2004-0689
bugzilla.redhat.com/show_bug.cgi?id=1617251
cve.org/CVERecord?id=CVE-2004-0689
nvd.nist.gov/vuln/detail/CVE-2004-0689
access.redhat.com/security/cve/CVE-2004-0721
bugzilla.redhat.com/show_bug.cgi?id=1617257
cve.org/CVERecord?id=CVE-2004-0721
access.redhat.com/security/cve/CVE-2004-0746
bugzilla.redhat.com/show_bug.cgi?id=1617260
cve.org/CVERecord?id=CVE-2004-0746
nvd.nist.gov/vuln/detail/CVE-2004-0746