CVE - CVE-2012-4513

CVE-ID
CVE-2012-4513	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
khtml/imload/scaledimageplane.h in Konqueror in KDE 4.7.3 allows remote attackers to cause a denial of service (crash) and possibly read memory via large canvas dimensions, which leads to an unexpected sign extension and a heap-based buffer over-read.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:1027709 URL:http://www.securitytracker.com/id?1027709 MISC:20121030 Medium risk security flaws in Konqueror URL:http://archives.neohapsis.com/archives/bugtraq/2012-11/0005.html MISC:51097 URL:http://secunia.com/advisories/51097 MISC:51145 URL:http://secunia.com/advisories/51145 MISC:RHSA-2012:1416 URL:http://rhn.redhat.com/errata/RHSA-2012-1416.html MISC:RHSA-2012:1418 URL:http://rhn.redhat.com/errata/RHSA-2012-1418.html MISC:[oss-security] 20121011 Re: Pre-advisory for Konqueror 4.7.3 (other versions may be affected) URL:http://www.openwall.com/lists/oss-security/2012/10/11/11 MISC:[oss-security] 20121030 Medium risk security flaws in Konqueror URL:http://www.openwall.com/lists/oss-security/2012/10/30/6 MISC:http://quickgit.kde.org/index.php?p=kdelibs.git&a=commitdiff&h=1f8b1b034ccf1713a5d123a4c327290f86d17d53 URL:http://quickgit.kde.org/index.php?p=kdelibs.git&a=commitdiff&h=1f8b1b034ccf1713a5d123a4c327290f86d17d53 MISC:http://www.nth-dimension.org.uk/pub/NDSA20121010.txt.asc URL:http://www.nth-dimension.org.uk/pub/NDSA20121010.txt.asc
Assigning CNA
Red Hat, Inc.
Date Record Created
20120821	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20120821)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)