CVE-2012-4512
28Vexday Risk Score
No sign of exploitation. It has a public proof of concept.
ssvc Attendepss 12%
from disclosure to weapon0 days
Published on NVDFeb 8
1st PoCNov 1
exploitation probability
12%top 4% of all CVEs
observed exploitation
nono source reports it
1 public exploit(s)
The CSS parser (khtml/css/cssparser.cpp) in Konqueror in KDE 4.7.3 allows remote attackers to cause a denial of service (crash) and possibly read memory via a crafted font face source, related to "type confusion."
Affected products
KDE · Konquerorpublic PoCs found — 1
exploitdbwww.exploit-db.com/exploits/22406unverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
References
http://archives.neohapsis.com/archives/bugtraq/2012-11/0005.htmlhttp://em386.blogspot.com/2010/12/webkit-css-type-confusion.htmlhttp://quickgit.kde.org/index.php?p=kdelibs.git&a=commitdiff&h=a872c8a969a8bd3706253d6ba24088e4f07f3352http://rhn.redhat.com/errata/RHSA-2012-1416.htmlhttp://rhn.redhat.com/errata/RHSA-2012-1418.htmlhttp://secunia.com/advisories/51097http://secunia.com/advisories/51145http://www.nth-dimension.org.uk/pub/NDSA20121010.txt.aschttp://www.openwall.com/lists/oss-security/2012/10/11/11http://www.openwall.com/lists/oss-security/2012/10/30/6http://www.securitytracker.com/id?1027709