ID:4459 - Exploit for Out-of-bounds read in KDE - CVE-2012-4513

 
Main Vulnerability Database Exploits ID:4459 - Exploit for Out-of-bounds read in KDE - CVE-2012-4513

ID:4459 - Exploit for Out-of-bounds read in KDE - CVE-2012-4513

Published: August 11, 2020


Vulnerability identifier: #VU43345
Vulnerability risk: Medium
CVE-ID: CVE-2012-4513
CWE-ID: CWE-125
Exploitation vector: Remote access
Vulnerable software:
KDE

Link to public exploit:


Vulnerability description

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to a boundary error in khtml/imload/scaledimageplane.h in Konqueror in KDE 4.7.3. A remote attacker can perform a denial of service (crash) and possibly read memory via large canvas dimensions, which leads to an unexpected sign extension and a heap-based buffer over-read.


Remediation

Cybersecurity Help is currently unaware of any official solution to address this vulnerability.