CVE-2012-4512

Опубликовано: 08 фев. 2020

Источник: nvd

CVSS3: 8.8

CVSS2: 6.8

EPSS Низкий

Описание

The CSS parser (khtml/css/cssparser.cpp) in Konqueror in KDE 4.7.3 allows remote attackers to cause a denial of service (crash) and possibly read memory via a crafted font face source, related to "type confusion."

Ссылки

http://archives.neohapsis.com/archives/bugtraq/2012-11/0005.html
Broken Link
Third Party Advisory
http://em386.blogspot.com/2010/12/webkit-css-type-confusion.html
Exploit
Third Party Advisory
http://quickgit.kde.org/index.php?p=kdelibs.git&a=commitdiff&h=a872c8a969a8bd3706253d6ba24088e4f07f3352
Broken Link
Vendor Advisory
http://rhn.redhat.com/errata/RHSA-2012-1416.html
Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2012-1418.html
Third Party Advisory
http://secunia.com/advisories/51097
Not Applicable
Third Party Advisory
http://secunia.com/advisories/51145
Not Applicable
Third Party Advisory
http://www.nth-dimension.org.uk/pub/NDSA20121010.txt.asc
Third Party Advisory
http://www.openwall.com/lists/oss-security/2012/10/11/11
Mailing List
Third Party Advisory
http://www.openwall.com/lists/oss-security/2012/10/30/6
Mailing List
Third Party Advisory
http://www.securitytracker.com/id?1027709
Third Party Advisory
VDB Entry
http://archives.neohapsis.com/archives/bugtraq/2012-11/0005.html
Broken Link
Third Party Advisory
http://em386.blogspot.com/2010/12/webkit-css-type-confusion.html
Exploit
Third Party Advisory
http://quickgit.kde.org/index.php?p=kdelibs.git&a=commitdiff&h=a872c8a969a8bd3706253d6ba24088e4f07f3352
Broken Link
Vendor Advisory
http://rhn.redhat.com/errata/RHSA-2012-1416.html
Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2012-1418.html
Third Party Advisory
http://secunia.com/advisories/51097
Not Applicable
Third Party Advisory
http://secunia.com/advisories/51145
Not Applicable
Third Party Advisory
http://www.nth-dimension.org.uk/pub/NDSA20121010.txt.asc
Third Party Advisory
http://www.openwall.com/lists/oss-security/2012/10/11/11
Mailing List
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:kde:kde:4.7.3:*:*:*:*:*:*:*

Конфигурация 2

Одно из

cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_server_eus:6.3:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*

EPSS

Процентиль: 92%

0.09042

Низкий

8.8 High

CVSS3

6.8 Medium

CVSS2

Дефекты

CWE-843

Связанные уязвимости

CVE-2012-4512

CVSS3: 8.8

ubuntu

больше 5 лет назад

CVE-2012-4512

redhat

почти 13 лет назад

CVE-2012-4512

CVSS3: 8.8

debian

больше 5 лет назад

The CSS parser (khtml/css/cssparser.cpp) in Konqueror in KDE 4.7.3 all ...

GHSA-8m6q-hj66-2cmr

CVSS3: 8.8

github

больше 3 лет назад

ELSA-2012-1418

oracle-oval

больше 12 лет назад

ELSA-2012-1418: kdelibs security update (CRITICAL)

EPSS

Процентиль: 92%

0.09042

Низкий

8.8 High

CVSS3

6.8 Medium

CVSS2

Дефекты

CWE-843