Bug 225414

Summary: CVE-2007-0537 Konqueror improper HTML comment rendering
Product: Red Hat Enterprise Linux 5 Reporter: Josh Bressers <bressers>
Component: kdelibsAssignee: Than Ngo <than>
Status: CLOSED DEFERRED QA Contact: Radek Bíba <rbiba>
Severity: medium Docs Contact:
Priority: medium    
Version: 5.0CC: tao
Target Milestone: ---Keywords: Security
Target Release: ---   
Hardware: All   
OS: Linux   
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2007-08-21 10:47:52 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Attachments:
Description Flags
Demo HTML file. This file should not display an alert dialog. none

Description Josh Bressers 2007-01-30 15:25:27 UTC 
A flaw was reported in the way Konqueror processes HTML which contains a comment
used in a certain manner.  It is possible to conduct a cross site scripting flaw
on sites that allow a user to enter HTML comments, which Konqueror will then
parse incorrectly, causing the site to display unintended content.
Comment 1 Josh Bressers 2007-01-30 15:25:27 UTC 
Created attachment 146918 [details]
Demo HTML file.  This file should not display an alert dialog.
Comment 2 Josh Bressers 2007-01-30 15:29:54 UTC 
This flaw also affects RHEL3.  I was unable to reproduce this flaw on RHEL2.1
Comment 3 Josh Bressers 2007-02-02 21:27:02 UTC 
I'm lowering the severity of this flaw to low.  Dirk Mueller clarified this
flaw.  It only affects placing comments in the <title> HTML tags.  This
significantly reduces the usefulness of this flaw.
Comment 6 Josh Bressers 2007-04-25 13:49:11 UTC 
I'm moving this bug to cover RHEL5, which means that it affects RHEL 3, 4, and 5.
Comment 10 Mark J. Cox 2007-08-21 10:47:52 UTC 
Closing as deferred, we may fix this in a future update but do not plan on
fixing due to this issue.  Removing flags as it's not approved for RHEL update
at this time.