PT-2012-5453

CVE-2012-4515

·

Published

2012-11-11

·

Updated

2012-11-12

Description by

CVSS 2.0
6.8
Medium
MetricsAV:N/AC:M/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions Konqueror in KDE version 4.7.3
Description The issue is related to a use-after-free vulnerability in the khtml/rendering/render replaced.cpp file. This vulnerability can be triggered when the context menu is shown and an iframe is being updated, allowing remote attackers to cause a denial of service (crash) and possibly execute arbitrary code.
Recommendations For Konqueror in KDE version 4.7.3, consider disabling the context menu feature as a temporary workaround until a patch is available. Restrict access to iframes to minimize the risk of exploitation.
Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Weakness enumeration
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾