CVE-2004-0527: KDE Konqueror 2.1.1 and 2.2.2 allows remote attackers to spoof a legitimate URL in the status bar via A HRE...

Security readout for executives and security teams

This is an old browser user-interface spoofing issue in KDE Konqueror 2.1.1 and 2.2.2. A malicious page could make the status bar appear to show a legitimate destination while a clickable image map leads elsewhere, supporting phishing. The sources do not provide CVSS, patch details, or evidence of active exploitation. Exposure is likely limited to environments that still allow KDE Konqueror 2.1.1 or 2.2.2. Modern standard browser fleets are unlikely to be affected unless legacy Linux desktops, archived systems, or specialist kiosks still use those versions. Treat this as low priority unless legacy Konqueror is present. The business concern is phishing risk on obsolete browser software, not direct infrastructure compromise. Confirm exposure through asset inventory before spending remediation effort. Mitigation focus: Inventory endpoints for KDE Konqueror 2.1.1 or 2.2.2.; Remove or disable unsupported Konqueror versions where found.; Use a currently supported browser for web access..

Prepared

Jun 30, 2026, 05:41 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.