CVE-2012-4512 The CSS parser (khtml/css/cssparser.cpp) in Konqueror in KDE 4.7.3 allows remote attackers to cause a denial of service (crash) and possibly read memory via a crafted font face source, related to "typ...
HighCVSS 8.8
EPSS 11.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The CSS parser (khtml/css/cssparser.cpp) in Konqueror in KDE 4.7.3 allows remote attackers to cause a denial of service (crash) and possibly read memory via a crafted font face source, related to "type confusion."
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| KDE konqueror | = 4.7.3 | No fix listed |
| kde | = 4.7.3 | No fix listed |
| redhat enterprise linux | = 6.0 | No fix listed |
| redhat enterprise linux desktop | = 6.0 | No fix listed |
| redhat enterprise linux server eus | = 6.3 | No fix listed |
| redhat enterprise linux workstation | = 6.0 | No fix listed |
References
- www.nth-dimension.org.uk third-party-advisory
- em386.blogspot.com exploit third-party-advisory
- archives.neohapsis.com broken-link third-party-advisory
- www.openwall.com mailing-list third-party-advisory
- www.openwall.com mailing-list third-party-advisory
- quickgit.kde.org broken-link vendor-advisory
- rhn.redhat.com third-party-advisory
- rhn.redhat.com third-party-advisory
- www.securitytracker.com third-party-advisory vdb-entry
- secunia.com not-applicable third-party-advisory
- secunia.com not-applicable third-party-advisory