PT-2012-5453
CVE-2012-4515
·
Published
2012-11-11
·
Updated
2012-11-12
Description by
CVSS 2.0
6.8
MediumMetricsAV:N/AC:M/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions
Konqueror in KDE version 4.7.3
Description
The issue is related to a use-after-free vulnerability in the khtml/rendering/render replaced.cpp file. This vulnerability can be triggered when the context menu is shown and an iframe is being updated, allowing remote attackers to cause a denial of service (crash) and possibly execute arbitrary code.
Recommendations
For Konqueror in KDE version 4.7.3, consider disabling the context menu feature as a temporary workaround until a patch is available. Restrict access to iframes to minimize the risk of exploitation.
Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾