ID:4457 - Exploit for Resource management error in KDE - CVE-2012-4515

 
Main Vulnerability Database Exploits ID:4457 - Exploit for Resource management error in KDE - CVE-2012-4515

ID:4457 - Exploit for Resource management error in KDE - CVE-2012-4515

Published: August 11, 2020


Vulnerability identifier: #VU43347
Vulnerability risk: Medium
CVE-ID: CVE-2012-4515
CWE-ID: CWE-399
Exploitation vector: Remote access
Vulnerable software:
KDE

Link to public exploit:


Vulnerability description

The vulnerability allows a remote non-authenticated attacker to read and manipulate data.

Use-after-free vulnerability in khtml/rendering/render_replaced.cpp in Konqueror in KDE 4.7.3, when the context menu is shown, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code by accessing an iframe when it is being updated.


Remediation

Install update from vendor's website.