CVE-2012-4512

EPSS 11.7%

Vexday Risk Score

28Low

SSVC decision (CISA)

Attend

PoC available → attend closely

CVSS —EPSS 11.7%KEV nãoPoC públicaNuclei —Metasploit —Patch —

Lifecycle

01 Nov 2012Public PoC

08 Feb 2020Published on NVD

Recommendation: Plan a near-term fix — a public PoC already exists.

The CSS parser (khtml/css/cssparser.cpp) in Konqueror in KDE 4.7.3 allows remote attackers to cause a denial of service (crash) and possibly read memory via a crafted font face source, related to "type confusion."

Affected products

KDE · Konqueror

public PoCs found — 1

exploitdbwww.exploit-db.com/exploits/22406unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://archives.neohapsis.com/archives/bugtraq/2012-11/0005.html http://em386.blogspot.com/2010/12/webkit-css-type-confusion.html http://quickgit.kde.org/index.php?p=kdelibs.git&a=commitdiff&h=a872c8a969a8bd3706253d6ba24088e4f07f3352 http://rhn.redhat.com/errata/RHSA-2012-1416.html http://rhn.redhat.com/errata/RHSA-2012-1418.html http://secunia.com/advisories/51097 http://secunia.com/advisories/51145 http://www.nth-dimension.org.uk/pub/NDSA20121010.txt.asc http://www.openwall.com/lists/oss-security/2012/10/11/11 http://www.openwall.com/lists/oss-security/2012/10/30/6 http://www.securitytracker.com/id?1027709