Konqueror 3.1.3, 3.2.2, and possibly other versions does not properly prevent a frame in one domain from injecting content into a frame that belongs to another domain, which facilitates web site spoofing and other attacks, aka the frame injection vulnerability.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Konqueror | Kde | 3.1.3 (including) | 3.1.3 (including) |
| Konqueror | Kde | 3.2.2 (including) | 3.2.2 (including) |
| Red Hat Enterprise Linux 3 | RedHat | kdebase-6:3.1.3-5.4 | * |
| Red Hat Enterprise Linux 3 | RedHat | kdelibs-6:3.1.3-6.6 | * |