Vulnerability CVE-2012-4514

Vulnerability Name:

CVE-2012-4514 (CCN-79287)

Assigned:

2012-10-10

Published:

2012-10-10

Updated:

2012-11-12

Summary:

rendering/render_replaced.cpp in Konqueror in KDE before 4.9.3 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted web page, related to "trying to reuse a frame with a null part."

CVSS v3 Severity:

5.3 Medium (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)

Exploitability Metrics:	Attack Vector (AV): Network Attack Complexity (AC): Low Privileges Required (PR): None User Interaction (UI): None
Scope:	Scope (S): Unchanged
Impact Metrics:	Confidentiality (C): None Integrity (I): None Availibility (A): Low

CVSS v2 Severity:

5.0 Medium (CVSS v2 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P)
3.9 Low (Temporal CVSS v2 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P/E:POC/RL:OF/RC:C)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): Low Authentication (Au): None
Impact Metrics:	Confidentiality (C): None Integrity (I): None Availibility (A): Partial

4.3 Medium (CCN CVSS v2 Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P)
3.4 Low (CCN Temporal CVSS v2 Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P/E:POC/RL:OF/RC:C)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): Medium Athentication (Au): None
Impact Metrics:	Confidentiality (C): None Integrity (I): None Availibility (A): Partial

Vulnerability Type:

CWE-noinfo

Vulnerability Consequences:

Denial of Service

References:

Source: BUGTRAQ
Type: UNKNOWN
20121030 Medium risk security flaws in Konqueror

Source: MITRE
Type: CNA
CVE-2012-4514

Source: CCN
Type: Packetstorm Security Website
Konqueror 4.7.3 Memory Corruption

Source: CONFIRM
Type: UNKNOWN
http://quickgit.kde.org/index.php?p=kdelibs.git&a=commitdiff&h=65464349951e0df9b5d80c2eb3cc7458d54923ae

Source: CCN
Type: oss-security: Tim Brown | 10 Oct
Pre-advisory for Konqueror 4.7.3 (other versions may be affected)

Source: CCN
Type: SA51097
KDE kdelibs Multiple Vulnerabilities

Source: CCN
Type: Konqueror Web site
Konqueror - Konqueror - Web Browser, File Manager - and more!

Source: CCN
Type: NDSA20121010
The Konqueror web browser is vulnerable to a number of memory corruption vulnerabilities

Source: MISC
Type: Exploit
http://www.nth-dimension.org.uk/pub/NDSA20121010.txt.asc

Source: MLIST
Type: UNKNOWN
[oss-security] 20121011 Re: Pre-advisory for Konqueror 4.7.3 (other versions may be affected)

Source: MLIST
Type: UNKNOWN
[oss-security] 20121030 Medium risk security flaws in Konqueror

Source: CCN
Type: BID-55879
KDE Konqueror Multiple Security Vulnerabilities

Source: CONFIRM
Type: UNKNOWN
https://bugs.kde.org/show_bug.cgi?id=271528

Source: CCN
Type: Red Hat Bugzilla Bug 869681
CVE-2012-4514 kdelibs (khtml): NULL pointer dereference when trying to reuse a frame with null part

Source: XF
Type: UNKNOWN
konqueror-unspec-dos(79287)

Source: EXPLOIT-DB
Type: EXPLOIT
Offensive Security Exploit Database [11-01-2012]

Vulnerable Configuration:

Configuration 1:

cpe:/o:kde:kde:1.0:*:*:*:*:*:*:*

OR cpe:/o:kde:kde:1.1:*:*:*:*:*:*:*

OR cpe:/o:kde:kde:1.1.1:*:*:*:*:*:*:*

OR cpe:/o:kde:kde:1.1.2:*:*:*:*:*:*:*

OR cpe:/o:kde:kde:1.2:*:*:*:*:*:*:*

OR cpe:/o:kde:kde:1.x:*:*:*:*:*:*:*

OR cpe:/o:kde:kde:2.0:*:*:*:*:*:*:*

OR cpe:/o:kde:kde:2.0.1:*:*:*:*:*:*:*

OR cpe:/o:kde:kde:2.0_beta:*:*:*:*:*:*:*

OR cpe:/o:kde:kde:2.1:*:*:*:*:*:*:*

OR cpe:/o:kde:kde:2.1.1:*:*:*:*:*:*:*

OR cpe:/o:kde:kde:2.1.2:*:*:*:*:*:*:*

OR cpe:/o:kde:kde:2.1_beta1:*:*:*:*:*:*:*

OR cpe:/o:kde:kde:2.1_beta2:*:*:*:*:*:*:*

OR cpe:/o:kde:kde:2.2:*:*:*:*:*:*:*

OR cpe:/o:kde:kde:2.2.1:*:*:*:*:*:*:*

OR cpe:/o:kde:kde:2.2.2:*:*:*:*:*:*:*

OR cpe:/o:kde:kde:2.2_beta1:*:*:*:*:*:*:*

OR cpe:/o:kde:kde:3.0:*:*:*:*:*:*:*

OR cpe:/o:kde:kde:3.0.1:*:*:*:*:*:*:*

OR cpe:/o:kde:kde:3.0.2:*:*:*:*:*:*:*

OR cpe:/o:kde:kde:3.0.3:*:*:*:*:*:*:*

OR cpe:/o:kde:kde:3.0.3a:*:*:*:*:*:*:*

OR cpe:/o:kde:kde:3.0.4:*:*:*:*:*:*:*

OR cpe:/o:kde:kde:3.0.5:*:*:*:*:*:*:*

OR cpe:/o:kde:kde:3.0.5a:*:*:*:*:*:*:*

OR cpe:/o:kde:kde:3.0.5b:*:*:*:*:*:*:*

OR cpe:/o:kde:kde:3.0_beta_1:*:*:*:*:*:*:*

OR cpe:/o:kde:kde:3.0_beta_2:*:*:*:*:*:*:*

OR cpe:/o:kde:kde:3.1:*:*:*:*:*:*:*

OR cpe:/o:kde:kde:3.1.0:*:*:*:*:*:*:*

OR cpe:/o:kde:kde:3.1.1:*:*:*:*:*:*:*

OR cpe:/o:kde:kde:3.1.1a:*:*:*:*:*:*:*

OR cpe:/o:kde:kde:3.1.2:*:*:*:*:*:*:*

OR cpe:/o:kde:kde:3.1.3:*:*:*:*:*:*:*

OR cpe:/o:kde:kde:3.1.4:*:*:*:*:*:*:*

OR cpe:/o:kde:kde:3.1.5:*:*:*:*:*:*:*

OR cpe:/o:kde:kde:3.1_alpha1:*:*:*:*:*:*:*

OR cpe:/o:kde:kde:3.1_beta1:*:*:*:*:*:*:*

OR cpe:/o:kde:kde:3.1_beta2:*:*:*:*:*:*:*

OR cpe:/o:kde:kde:3.2:*:*:*:*:*:*:*

OR cpe:/o:kde:kde:3.2.0:*:*:*:*:*:*:*

OR cpe:/o:kde:kde:3.2.0_beta1:*:*:*:*:*:*:*

OR cpe:/o:kde:kde:3.2.1:*:*:*:*:*:*:*

OR cpe:/o:kde:kde:3.2.2:*:*:*:*:*:*:*

OR cpe:/o:kde:kde:3.2.3:*:*:*:*:*:*:*

OR cpe:/o:kde:kde:3.2.x:*:*:*:*:*:*:*

OR cpe:/o:kde:kde:3.3:*:*:*:*:*:*:*

OR cpe:/o:kde:kde:3.3.0:*:*:*:*:*:*:*

OR cpe:/o:kde:kde:3.3.1:*:*:*:*:*:*:*

OR cpe:/o:kde:kde:3.3.2:*:*:*:*:*:*:*

OR cpe:/o:kde:kde:3.3.x:*:*:*:*:*:*:*

OR cpe:/o:kde:kde:3.4:*:*:*:*:*:*:*

OR cpe:/o:kde:kde:3.4.0:*:*:*:*:*:*:*

OR cpe:/o:kde:kde:3.4.1:*:*:*:*:*:*:*

OR cpe:/o:kde:kde:3.4.2:*:*:*:*:*:*:*

OR cpe:/o:kde:kde:3.4.3:*:*:*:*:*:*:*

OR cpe:/o:kde:kde:3.5:*:*:*:*:*:*:*

OR cpe:/o:kde:kde:3.5.0:*:*:*:*:*:*:*

OR cpe:/o:kde:kde:3.5.1:*:*:*:*:*:*:*

OR cpe:/o:kde:kde:3.5.2:*:*:*:*:*:*:*

OR cpe:/o:kde:kde:3.5.3:*:*:*:*:*:*:*

OR cpe:/o:kde:kde:3.5.4:*:*:*:*:*:*:*

OR cpe:/o:kde:kde:3.5.5:*:*:*:*:*:*:*

OR cpe:/o:kde:kde:3.5.6:*:*:*:*:*:*:*

OR cpe:/o:kde:kde:3.5.7:*:*:*:*:*:*:*

OR cpe:/o:kde:kde:3.5.8:*:*:*:*:*:*:*

OR cpe:/o:kde:kde:3.5.9:*:*:*:*:*:*:*

OR cpe:/o:kde:kde:3.5.10:*:*:*:*:*:*:*

OR cpe:/o:kde:kde:4.0.0:*:*:*:*:*:*:*

OR cpe:/o:kde:kde:4.0.1:*:*:*:*:*:*:*

OR cpe:/o:kde:kde:4.0.2:*:*:*:*:*:*:*

OR cpe:/o:kde:kde:4.0.3:*:*:*:*:*:*:*

OR cpe:/o:kde:kde:4.7.3:*:*:*:*:*:*:*

OR cpe:/o:kde:kde:4.9.0:*:*:*:*:*:*:*

OR cpe:/o:kde:kde:4.9.1:*:*:*:*:*:*:*

OR cpe:/o:kde:kde:*:*:*:*:*:*:*:* (Version <= 4.9.2)

Denotes that component is vulnerable

Oval Definitions

Definition ID	Class	Title	Last Modified
oval:org.opensuse.security:def:20124514	V	CVE-2012-4514	2014-01-28
oval:com.ubuntu.precise:def:20124514000	V	CVE-2012-4514 on Ubuntu 12.04 LTS (precise) - low.	2012-11-11
oval:com.ubuntu.xenial:def:201245140000000	V	CVE-2012-4514 on Ubuntu 16.04 LTS (xenial) - low.	2012-11-11
oval:com.ubuntu.trusty:def:20124514000	V	CVE-2012-4514 on Ubuntu 14.04 LTS (trusty) - low.	2012-11-11
oval:com.ubuntu.xenial:def:20124514000	V	CVE-2012-4514 on Ubuntu 16.04 LTS (xenial) - low.	2012-11-11

BACK