CVE Feed

    Dashboard / CVE / CVE-2012-4512

    CVE-2012-4512

    The CSS parser (khtml/css/cssparser.cpp) in Konqueror in KDE 4.7.3 allows remote attackers to cause a denial of service (crash) and possibly read memory via a crafted font face source, related to "type confusion."

    Published:Oct 30, 2012
    Last Modified:Nov 21, 2024
    EPS:Feb 8, 2020
    EPSS Score:0.09042
    CVSS Score:8.8

    Affected Products

    Vendor
    Kde
    Product
    Kde
    Vendor
    Redhat
    Product
    Enterprise Linux
    Vendor
    Redhat
    Product
    Enterprise Linux Desktop
    Vendor
    Redhat
    Product
    Enterprise Linux Server Eus
    Vendor
    Redhat
    Product
    Enterprise Linux Workstation

    Exploits

    http://em386.blogspot.com/2010/12/webkit-css-type-confusion.htmlhttp://em386.blogspot.com/2010/12/webkit-css-type-confusion.htmlhttps://www.exploit-db.com/exploits/22406

    Common Attack Pattern Enumeration and Classification (CAPEC)

    CAPEC-92 Forced Integer Overflow

    Related CVEs

    CVE-2025-66003 (CVSS 7.3) — An External Control of File Name or Path vulnerability in smb4k allowsl ocal users to perform a local root exp…
    CVE-2025-66002 (CVSS 6.9) — An Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') vulnerability allows lo…
    CVE-2025-32900 (CVSS 4.3) — In the KDE Connect information-exchange protocol before 2025-04-18, a packet can be crafted to temporarily cha…
    CVE-2025-32898 (CVSS 4.7) — The KDE Connect verification-code protocol before 2025-04-18 uses only 8 characters and therefore allows brute…
    CVE-2025-66270 (CVSS 4.7) — The KDE Connect protocol 8 before 2025-11-28 does not correlate device IDs across two packets. This affects KD…
    CVE-2025-62876 (CVSS 5.3) — A Execution with Unnecessary Privileges vulnerability in lightdm-kde-greeter allows escalation from the servic…
    CVE-2017-9604 (CVSS 7.5) — KDE kmail before 5.5.2 and messagelib before 5.5.2, as distributed in KDE Applications before 17.04.2, do not …
    CVE-2012-4514 (CVSS 5) — rendering/render_replaced.cpp in Konqueror in KDE before 4.9.3 allows remote attackers to cause a denial of se…
    CVE-2012-4515 (CVSS 6.8) — Use-after-free vulnerability in khtml/rendering/render_replaced.cpp in Konqueror in KDE 4.7.3, when the contex…
    CVE-2012-4513 (CVSS 6.4) — khtml/imload/scaledimageplane.h in Konqueror in KDE 4.7.3 allows remote attackers to cause a denial of service…

    References

    http://archives.neohapsis.com/archives/bugtraq/2012-11/0005.html
    http://em386.blogspot.com/2010/12/webkit-css-type-confusion.html
    http://quickgit.kde.org/index.php?p=kdelibs.git&a=commitdiff&h=a872c8a969a8bd3706253d6ba24088e4f07f3352
    http://rhn.redhat.com/errata/RHSA-2012-1416.html
    http://rhn.redhat.com/errata/RHSA-2012-1418.html
    http://secunia.com/advisories/51097
    http://secunia.com/advisories/51145
    http://www.nth-dimension.org.uk/pub/NDSA20121010.txt.asc
    http://www.openwall.com/lists/oss-security/2012/10/11/11
    http://www.openwall.com/lists/oss-security/2012/10/30/6
    http://www.securitytracker.com/id?1027709
    http://archives.neohapsis.com/archives/bugtraq/2012-11/0005.html
    http://em386.blogspot.com/2010/12/webkit-css-type-confusion.html
    http://quickgit.kde.org/index.php?p=kdelibs.git&a=commitdiff&h=a872c8a969a8bd3706253d6ba24088e4f07f3352
    http://rhn.redhat.com/errata/RHSA-2012-1416.html
    http://rhn.redhat.com/errata/RHSA-2012-1418.html
    http://secunia.com/advisories/51097
    http://secunia.com/advisories/51145
    http://www.nth-dimension.org.uk/pub/NDSA20121010.txt.asc
    http://www.openwall.com/lists/oss-security/2012/10/11/11
    http://www.openwall.com/lists/oss-security/2012/10/30/6
    http://www.securitytracker.com/id?1027709

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High