CVE - CVE-2012-4515

CVE-ID
CVE-2012-4515	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
Use-after-free vulnerability in khtml/rendering/render_replaced.cpp in Konqueror in KDE 4.7.3, when the context menu is shown, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code by accessing an iframe when it is being updated.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:20121030 Medium risk security flaws in Konqueror URL:http://archives.neohapsis.com/archives/bugtraq/2012-11/0005.html MISC:51097 URL:http://secunia.com/advisories/51097 MISC:51145 URL:http://secunia.com/advisories/51145 MISC:[oss-security] 20121011 Re: Pre-advisory for Konqueror 4.7.3 (other versions may be affected) URL:http://www.openwall.com/lists/oss-security/2012/10/11/11 MISC:[oss-security] 20121030 Medium risk security flaws in Konqueror URL:http://www.openwall.com/lists/oss-security/2012/10/30/6 MISC:http://quickgit.kde.org/index.php?p=kdelibs.git&a=commitdiff&h=4f2eb356f1c23444fff2cfe0a7ae10efe303d6d8 URL:http://quickgit.kde.org/index.php?p=kdelibs.git&a=commitdiff&h=4f2eb356f1c23444fff2cfe0a7ae10efe303d6d8 MISC:http://www.nth-dimension.org.uk/pub/NDSA20121010.txt.asc URL:http://www.nth-dimension.org.uk/pub/NDSA20121010.txt.asc
Assigning CNA
Red Hat, Inc.
Date Record Created
20120821	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20120821)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)