Vulnerability record · CVE-2007-1565 · published 21 March 2007

CVE-2007-1565: Kde konqueror vulnerability

Kde · Konqueror

Konqueror 3.5.5 allows remote attackers to cause a denial of service (crash) by using JavaScript to read a child iframe having an ftp:// URI.

7.8 CVSS 2.0 High EPSS 1.3% · top 31.6%

7.8CVSS 2.0 base score

1.3%EPSS exploitation probability, 30 days

NoNot in CISA KEV

1Affected product versions listed by NVD

2References

16 Jun 2026Last modified by NVD

Description

Konqueror 3.5.5 allows remote attackers to cause a denial of service (crash) by using JavaScript to read a child iframe having an ftp:// URI.

AV:N/AC:L/Au:N/C:N/I:N/A:C

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

Konqueror Kde

References

Link	Tags
http://bindshell.net/papers/ftppasv/ftp-client-pasv-manipulation.pdf	Vendor Advisory
http://bindshell.net/papers/ftppasv/ftp-client-pasv-manipulation.pdf	Vendor Advisory

Track CVE-2007-1565 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

7.5CVE-2004-1158Kde konqueror vulnerabilityKonqueror 3.x up to 3.2.2-6, and possibly other versions, allows remote attackers to spoof arbitrary web sites by injecting content from one window i…EPSS 2.7%10 Jan 2005 7.5CVE-2004-1165Kdelibs vulnerabilityKonqueror 3.3.1 allows remote attackers to execute arbitrary FTP commands via an ftp:// URL that contains a URL-encoded newline ("%0a") before the FT…EPSS 4.4%10 Jan 2005 7.5CVE-2004-0867Kde konqueror permissions and access controls vulnerabilityMozilla Firefox 0.9.2 allows web sites to set cookies for country-specific top-level domains, such as .ltd.uk, .plc.uk, and .sch.uk, which could allo…EPSS 17%23 Dec 2004 7.5CVE-2004-0746Kde konqueror vulnerabilityKonqueror in KDE 3.2.3 and earlier allows web sites to set cookies for country-specific top-level domains, such as .ltd.uk, .plc.uk and .firm.in, whi…EPSS 1.9%20 Oct 2004 7.5CVE-2004-0866Kde konqueror vulnerabilityInternet Explorer 6.0 allows web sites to set cookies for country-specific top-level domains, such as .ltd.uk, .plc.uk, and .sch.uk, which could allo…EPSS 10%16 Sep 2004 7.5CVE-2004-0721Kde konqueror vulnerabilityKonqueror 3.1.3, 3.2.2, and possibly other versions does not properly prevent a frame in one domain from injecting content into a frame that belongs …EPSS 1.6%27 Jul 2004 7.5CVE-2004-0411Kde konqueror argument injection vulnerabilityThe URI handlers in Konqueror for KDE 3.2.2 and earlier do not properly filter "-" characters that begin a hostname in a (1) telnet, (2) rlogin, (3) …EPSS 7.8%7 Jul 2004 7.5CVE-2003-0592Kde konqueror vulnerabilityKonqueror in KDE 3.1.3 and earlier (kdelibs) allows remote attackers to bypass intended cookie access restrictions on a web application via "%2e%2e" …EPSS 4.4%15 Apr 2004

Source: NIST National Vulnerability Database (record CVE-2007-1565), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.