VYPR
← All advisories
Unrated severityNVD Advisory· Published Dec 28, 2007· Updated Jun 16, 2026

CVE-2007-6591

CVE-2007-6591

Description

KDE Konqueror 3.5.5 and 3.95.00, when a user accepts an SSL server certificate on the basis of the CN domain name in the DN field, regards the certificate as also accepted for all domain names in subjectAltName:dNSName fields, even though these fields cannot be examined in the product, which makes it easier for remote attackers to trick a user into accepting an invalid certificate for a spoofed web site.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • KDE/Konqueror3 versions
    cpe:2.3:a:kde:konqueror:3.5.5:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:kde:konqueror:3.5.5:*:*:*:*:*:*:*
    • cpe:2.3:a:kde:konqueror:3.95.00:*:*:*:*:*:*:*
    • (no CPE)range: 3.5.5, 3.95.00

Patches

Vulnerability mechanics

References

5

News mentions

0

No linked articles in our index yet.