CVE-2012-4515: Use After Free
First published: Sun Nov 11 2012(Updated: )
Use-after-free vulnerability in khtml/rendering/render_replaced.cpp in Konqueror in KDE 4.7.3, when the context menu is shown, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code by accessing an iframe when it is being updated.
Credit: secalert@redhat.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| KDE Kde Beta 3 | =4.7.3 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://archives.neohapsis.com/archives/bugtraq/2012-11/0005.html
- http://quickgit.kde.org/index.php?p=kdelibs.git&a=commitdiff&h=4f2eb356f1c23444fff2cfe0a7ae10efe303d6d8
- http://secunia.com/advisories/51097
- http://secunia.com/advisories/51145
- http://www.nth-dimension.org.uk/pub/NDSA20121010.txt.asc
- http://www.openwall.com/lists/oss-security/2012/10/11/11
- http://www.openwall.com/lists/oss-security/2012/10/30/6
Frequently Asked Questions
What is the severity of CVE-2012-4515?
CVE-2012-4515 has a severity rating that allows remote attackers to crash the application or potentially execute arbitrary code.
How do I fix CVE-2012-4515?
Fixing CVE-2012-4515 requires upgrading to a patched version of KDE that addresses the use-after-free vulnerability.
What systems are affected by CVE-2012-4515?
CVE-2012-4515 specifically affects KDE version 4.7.3.
What type of vulnerability is CVE-2012-4515?
CVE-2012-4515 is classified as a use-after-free vulnerability in the Konqueror web browser.
Can CVE-2012-4515 lead to remote code execution?
Yes, CVE-2012-4515 can potentially result in remote code execution due to improper handling of an iframe.
- agent/severity
- agent/weakness
- agent/author
- agent/type
- agent/event
- agent/references
- agent/description
- agent/first-publish-date
- agent/softwarecombine
- agent/last-modified-date
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/kde
- canonical/kde kde beta 3
- version/kde kde beta 3/4.7.3