CVE-2012-4514

23Vexday Risk Score

No sign of exploitation. It has a public proof of concept.

ssvc Attendepss 9.7%

from disclosure to weapon0 days

Published on NVDNov 11

1st PoCNov 1

exploitation probability

9.7%top 5% of all CVEs

observed exploitation

nono source reports it

1 public exploit(s)

rendering/render_replaced.cpp in Konqueror in KDE before 4.9.3 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted web page, related to "trying to reuse a frame with a null part."

Affected products

n/a · n/a

public PoCs found — 1

exploitdbwww.exploit-db.com/exploits/22406unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

References

http://archives.neohapsis.com/archives/bugtraq/2012-11/0005.html http://quickgit.kde.org/index.php?p=kdelibs.git&a=commitdiff&h=65464349951e0df9b5d80c2eb3cc7458d54923ae https://bugs.kde.org/show_bug.cgi?id=271528 http://www.nth-dimension.org.uk/pub/NDSA20121010.txt.asc http://www.openwall.com/lists/oss-security/2012/10/11/11 http://www.openwall.com/lists/oss-security/2012/10/30/6