Konqueror 3.1.3, 3.2.2, and possibly other versions does not properly prevent a frame in one domain from injecting content into a frame that belongs to another domain, which facilitates web site spoofing and other attacks, aka the frame injection vulnerability.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Konqueror | Kde | 3.1.3 (including) | 3.1.3 (including) |
| Konqueror | Kde | 3.2.2 (including) | 3.2.2 (including) |