CVE-2012-4514: Null Pointer Dereference
Published Nov 11, 2012
·Updated
rendering/renderreplaced.cpp in Konqueror in KDE before 4.9.3 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted web page, related to "trying to reuse a frame with a null part."
Affected Software
77 affected components
KDE kde<=4.9.2
KDE kde=1.0
KDE kde=1.1
KDE kde=1.1.1
KDE kde=1.1.2
KDE kde=1.2
KDE kde=1.x
KDE kde=2.0
KDE kde=2.0.1
KDE kde=2.0_beta
KDE kde=2.1
KDE kde=2.1.1
KDE kde=2.1.2
KDE kde=2.1_beta1
KDE kde=2.1_beta2
KDE kde=2.2
KDE kde=2.2.1
KDE kde=2.2.2
KDE kde=2.2_beta1
KDE kde=3.0
KDE kde=3.0.1
KDE kde=3.0.2
KDE kde=3.0.3
KDE kde=3.0.3a
KDE kde=3.0.4
KDE kde=3.0.5
KDE kde=3.0.5a
KDE kde=3.0.5b
KDE kde=3.0_beta_1
KDE kde=3.0_beta_2
KDE kde=3.1
KDE kde=3.1.0
KDE kde=3.1.1
KDE kde=3.1.1a
KDE kde=3.1.2
KDE kde=3.1.3
KDE kde=3.1.4
KDE kde=3.1.5
KDE kde=3.1_alpha1
KDE kde=3.1_beta1
KDE kde=3.1_beta2
KDE kde=3.2
KDE kde=3.2.0
KDE kde=3.2.0_beta1
KDE kde=3.2.1
KDE kde=3.2.2
KDE kde=3.2.3
KDE kde=3.2.x
KDE kde=3.3
KDE kde=3.3.0
KDE kde=3.3.1
KDE kde=3.3.2
KDE kde=3.3.x
KDE kde=3.4
KDE kde=3.4.0
KDE kde=3.4.1
KDE kde=3.4.2
KDE kde=3.4.3
KDE kde=3.5
KDE kde=3.5.0
KDE kde=3.5.1
KDE kde=3.5.2
KDE kde=3.5.3
KDE kde=3.5.4
KDE kde=3.5.5
KDE kde=3.5.6
KDE kde=3.5.7
KDE kde=3.5.8
KDE kde=3.5.9
KDE kde=3.5.10
KDE kde=4.0.0
KDE kde=4.0.1
KDE kde=4.0.2
KDE kde=4.0.3
KDE kde=4.7.3
KDE kde=4.9.0
KDE kde=4.9.1
Event History
Nov 11, 2012
CVE Published
via MITRE·11:00 AM
Data Sourced
via MITRE·11:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2012-4514?
CVE-2012-4514 has a medium severity rating due to its potential for causing denial of service.
2
How do I fix CVE-2012-4514?
You can fix CVE-2012-4514 by upgrading to KDE version 4.9.3 or later.
3
Who is affected by CVE-2012-4514?
CVE-2012-4514 affects users of KDE versions prior to 4.9.3.
4
What type of vulnerability is CVE-2012-4514?
CVE-2012-4514 is a denial of service vulnerability caused by a NULL pointer dereference.
5
Can CVE-2012-4514 be exploited remotely?
Yes, CVE-2012-4514 can be exploited remotely through a specially crafted web page.