First published: Sun Nov 11 2012(Updated: )
khtml/imload/scaledimageplane.h in Konqueror in KDE 4.7.3 allows remote attackers to cause a denial of service (crash) and possibly read memory via large canvas dimensions, which leads to an unexpected sign extension and a heap-based buffer over-read.
Credit: secalert@redhat.com
Affected Software | Affected Version | How to fix |
---|---|---|
KDE Kde Beta 3 | =4.7.3 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2012-4513 is classified as a denial of service vulnerability that can lead to application crashes.
To mitigate CVE-2012-4513, upgrade to KDE version 4.7.4 or later where the vulnerability has been addressed.
CVE-2012-4513 is caused by improper handling of large canvas dimensions in Konqueror, leading to unexpected sign extension and buffer over-read issues.
KDE version 4.7.3 is specifically affected by CVE-2012-4513.
Yes, CVE-2012-4513 can be exploited by remote attackers to cause a denial of service.