Vulnerability Details : CVE-2012-4512
The CSS parser (khtml/css/cssparser.cpp) in Konqueror in KDE 4.7.3 allows remote attackers to cause a denial of service (crash) and possibly read memory via a crafted font face source, related to "type confusion."
Vulnerability category: Denial of service
Products affected by CVE-2012-4512
- cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_server_eus:6.3:*:*:*:*:*:*:*
- cpe:2.3:a:kde:kde:4.7.3:*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2012-4512
1.97%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 87 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2012-4512
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
|---|---|---|---|---|---|---|
|
6.8
|
MEDIUM | AV:N/AC:M/Au:N/C:P/I:P/A:P |
8.6
|
6.4
|
NIST | |
|
8.8
|
HIGH | CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H |
2.8
|
5.9
|
NIST |
CWE ids for CVE-2012-4512
-
The product allocates or initializes a resource such as a pointer, object, or variable using one type, but it later accesses that resource using a type that is incompatible with the original type.Assigned by: nvd@nist.gov (Primary)
References for CVE-2012-4512
-
http://rhn.redhat.com/errata/RHSA-2012-1418.html
RHSA-2012:1418 - Security Advisory - Red Hat Customer PortalThird Party Advisory
-
http://secunia.com/advisories/51097
Sign inNot Applicable;Third Party Advisory
-
http://www.securitytracker.com/id?1027709
kdelibs Heap Overflows Let Remote Users Execute Arbitrary Code - SecurityTrackerThird Party Advisory;VDB Entry
-
http://em386.blogspot.com/2010/12/webkit-css-type-confusion.html
EM_386: WebKit CSS Type ConfusionExploit;Third Party Advisory
-
http://www.nth-dimension.org.uk/pub/NDSA20121010.txt.asc
Third Party Advisory
-
http://archives.neohapsis.com/archives/bugtraq/2012-11/0005.html
Broken Link;Third Party Advisory
-
http://www.openwall.com/lists/oss-security/2012/10/30/6
oss-security - Medium risk security flaws in KonquerorMailing List;Third Party Advisory
-
http://quickgit.kde.org/index.php?p=kdelibs.git&a=commitdiff&h=a872c8a969a8bd3706253d6ba24088e4f07f3352
Broken Link;Vendor Advisory
-
http://secunia.com/advisories/51145
Sign inNot Applicable;Third Party Advisory
-
http://www.openwall.com/lists/oss-security/2012/10/11/11
oss-security - Re: Pre-advisory for Konqueror 4.7.3 (other versions may be affected)Mailing List;Third Party Advisory
-
http://rhn.redhat.com/errata/RHSA-2012-1416.html
RHSA-2012:1416 - Security Advisory - Red Hat Customer PortalThird Party Advisory
Jump to