PT-2012-5453

CVE-2012-4515

·

Publicado

2012-11-11

·

Atualizado

2012-11-12

Descrição por

CVSS 2.0
6.8
Média
MétricasAV:N/AC:M/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions Konqueror in KDE version 4.7.3
Description The issue is related to a use-after-free vulnerability in the khtml/rendering/render replaced.cpp file. This vulnerability can be triggered when the context menu is shown and an iframe is being updated, allowing remote attackers to cause a denial of service (crash) and possibly execute arbitrary code.
Recommendations For Konqueror in KDE version 4.7.3, consider disabling the context menu feature as a temporary workaround until a patch is available. Restrict access to iframes to minimize the risk of exploitation.
Explorabilidade
Exploit
Correção
Impactos
Pesquisadores
Fornecedores
Produtos afetados
Enumeração de fraquezas
Identificadores relacionados
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾