CVE-2004-0527: Kde Konqueror

Medium severity, CVSS 5.0. EPSS: 5.8% chance of exploitation in the next 30 days.

KDE Konqueror 2.1.1 and 2.2.2 allows remote attackers to spoof a legitimate URL in the status bar via A HREF tags with modified "alt" values that point to the legitimate site, combined with an image map whose href points to the malicious site, which facilitates a "phishing" attack.

Affected products

• Kde Konqueror: version 2.1.1 only; version 2.2.2 only; version 3.0 only; version 3.0.1 only; version 3.0.2 only; version 3.0.3 only; …

Published 2004-08-06. Last modified 2026-06-16.