PublicDate: 2005-01-10 05:00:00 UTC Candidate: CVE-2004-1158 References: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-1158 Description: Konqueror 3.x up to 3.2.2-6, and possibly other versions, allows remote attackers to spoof arbitrary web sites by injecting content from one window into a target window or tab whose name is known but resides in a different domain, as demonstrated using a pop-up window on a trusted web site, aka the "window injection" vulnerability. Ubuntu-Description: Notes: Priority: untriaged Discovered-by: Assigned-to: CVSS: Bugs: dapper_kdelibs: released (3.5.2-0ubuntu18.5) edgy_kdelibs: released (3.5.5-0ubuntu3.5) feisty_kdelibs: released (3.5.6-0ubuntu14.1) devel_kdelibs: released (3.5.7-1ubuntu14) dapper_kdebase: released (3.5.2-0ubuntu27.1) edgy_kdebase: released (3.5.5-0ubuntu3.5) feisty_kdebase: released (3.5.6-0ubuntu20.2) devel_kdebase: released (3.5.7-1ubuntu23) upstream_kdebase: needs-triage upstream_kdelibs: needs-triage