PT-2012-5453
CVE-2012-4515
·
تاريخ النشر
2012-11-11
·
تاريخ التحديث
2012-11-12
الوصف من
CVSS 2.0
6.8
متوسطةالمقاييسAV:N/AC:M/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions
Konqueror in KDE version 4.7.3
Description
The issue is related to a use-after-free vulnerability in the khtml/rendering/render replaced.cpp file. This vulnerability can be triggered when the context menu is shown and an iframe is being updated, allowing remote attackers to cause a denial of service (crash) and possibly execute arbitrary code.
Recommendations
For Konqueror in KDE version 4.7.3, consider disabling the context menu feature as a temporary workaround until a patch is available. Restrict access to iframes to minimize the risk of exploitation.
قابلية الاستغلال
استغلال
إصلاح
التأثيرات
الباحثون
المورّدون
المنتجات المتأثرة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾