Skip to main content

Kde CVE-2012-4515

MEDIUM
Resource Management Errors (CWE-399)
2012-11-11 secalert@redhat.com
6.8
CVSS 2.0 · NVD
Share

Severity by source

NVD PRIMARY
6.8 MEDIUM
AV:N/AC:M/Au:N/C:P/I:P/A:P

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

Attack Vector
Network
Attack Complexity
M
Confidentiality
P
Integrity
P
Availability
P

Lifecycle Timeline

1
CVE Published
Nov 11, 2012 - 13:00 cve.org
MEDIUM 6.8

DescriptionCVE.org

Use-after-free vulnerability in khtml/rendering/render_replaced.cpp in Konqueror in KDE 4.7.3, when the context menu is shown, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code by accessing an iframe when it is being updated.

AnalysisAI

Use-after-free vulnerability in khtml/rendering/render_replaced.cpp in Konqueror in KDE 4.7.3, when the context menu is shown, allows remote attackers to cause a denial of service (crash) and. Rated medium severity (CVSS 6.8), this vulnerability is remotely exploitable. Public exploit code available and no vendor patch available.

Technical ContextAI

This vulnerability is classified under CWE-399. Use-after-free vulnerability in khtml/rendering/render_replaced.cpp in Konqueror in KDE 4.7.3, when the context menu is shown, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code by accessing an iframe when it is being updated. Affected products include: Kde.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

More in Kde

View all
CVE-2012-4513 MEDIUM POC
6.4 Nov 11

khtml/imload/scaledimageplane.h in Konqueror in KDE 4.7.3 allows remote attackers to cause a denial of service (crash) a

CVE-2016-6232 HIGH POC
7.5 Aug 02

Directory traversal vulnerability in KArchive before 5.24, as used in KDE Frameworks, allows remote attackers to write t

CVE-2017-5330 HIGH POC
7.8 Mar 27

ark before 16.12.1 might allow remote attackers to execute arbitrary code via an executable in an archive, related to as

CVE-2017-8422 HIGH POC
7.8 May 17

KDE kdelibs before 4.14.32 and KAuth before 5.34 allow local users to gain root privileges by spoofing a callerID and le

CVE-2019-14744 HIGH POC
7.8 Aug 07

In KDE Frameworks KConfig before 5.61.0, malicious desktop files and configuration files lead to code execution with min

CVE-2015-7543 HIGH POC
7.0 Jul 25

aRts 1.5.10 and kdelibs3 3.5.10 and earlier do not properly create temporary directories, which allows local users to hi

CVE-2014-5033 MEDIUM POC
6.9 Aug 19

KDE kdelibs before 4.14 and kauth before 5.1 does not properly use D-Bus for communication with a polkit authority, whic

CVE-2012-4514 MEDIUM POC
5.0 Nov 11

rendering/render_replaced.cpp in Konqueror in KDE before 4.9.3 allows remote attackers to cause a denial of service (NUL

CVE-2021-36083 MEDIUM POC
5.5 Jul 01

KDE KImageFormats 5.70.0 through 5.81.0 has a stack-based buffer overflow in XCFImageFormat::loadTileRLE. Rated medium s

CVE-2020-13152 MEDIUM POC
5.5 May 20

A remote user can create a specially crafted M3U file, media playlist file that when loaded by the target user, will tri

CVE-2018-1000801 MEDIUM POC
5.5 Sep 06

okular version 18.08 and earlier contains a Directory Traversal vulnerability in function "unpackDocumentArchive(...)" i

CVE-2013-7252 MEDIUM POC
5.0 Jan 18

kwalletd in KWallet before KDE Applications 14.12.0 uses Blowfish with ECB mode instead of CBC mode when encrypting the

Share

CVE-2012-4515 vulnerability details – vuln.today

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy