Out-of-bounds read in KDE - CVE-2012-4513

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU43345

Out-of-bounds read in KDE - CVE-2012-4513

Published: November 11, 2012 / Updated: August 11, 2020


Vulnerability identifier: #VU43345
CSH Severity: Medium
CVSS v4.0: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/U:Green
CVE-ID: CVE-2012-4513
CWE-ID: CWE-125
Exploitation vector: Remote access
Exploit availability: Public exploit is available
Vendor: KDE.org
Affected software:
KDE

Detailed vulnerability description

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to a boundary error in khtml/imload/scaledimageplane.h in Konqueror in KDE 4.7.3. A remote attacker can perform a denial of service (crash) and possibly read memory via large canvas dimensions, which leads to an unexpected sign extension and a heap-based buffer over-read.


How to mitigate CVE-2012-4513

Cybersecurity Help is currently unaware of any official solution to address this vulnerability.

Sources