CVE-2012-4512
HIGH
8.8
CVSS Score
Published: February 8, 2020 at 06:09 PM UTC
Updated: June 16, 2026 at 11:45 PM UTC
6 products affected across 2 vendorsEnterprise LinuxEnterprise Linux DesktopEnterprise Linux Workstation
Using Konqueror by KDE?
Get instant alerts when new vulnerabilities affect Konqueror - before attackers find them.
Real-time alertsTrack your software stackFree plan available
Severity
HIGH8.8
Exploit prediction
EPSS 12%
Description
The CSS parser (khtml/css/cssparser.cpp) in Konqueror in KDE 4.7.3 allows remote attackers to cause a denial of service (crash) and possibly read memory via a crafted font face source, related to "type confusion."
Affected
Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.
95%
95%
95%
Remediation
No guide yetNo remediation guidance has been written for this CVE yet. What the record does show:
Patch and advisory references
References (11)
x_refsource_MISCBroken LinkThird Party Advisory
Source: [email protected]
http://archives.neohapsis.com/archives/bugtraq/2012-11/0005.htmlx_refsource_MISCExploitThird Party Advisory
Source: [email protected]
http://em386.blogspot.com/2010/12/webkit-css-type-confusion.htmlx_refsource_MISCBroken LinkVendor Advisory
Source: [email protected]
http://quickgit.kde.org/index.php?p=kdelibs.git&a=commitdiff&h=a872c8a969a8bd3706253d6ba24088e4f07f3352x_refsource_MISCThird Party Advisory
Source: [email protected]
http://rhn.redhat.com/errata/RHSA-2012-1416.htmlx_refsource_MISCThird Party Advisory
Source: [email protected]
http://rhn.redhat.com/errata/RHSA-2012-1418.htmlx_refsource_MISCNot ApplicableThird Party Advisory
Source: [email protected]
http://secunia.com/advisories/51097x_refsource_MISCNot ApplicableThird Party Advisory
Source: [email protected]
http://secunia.com/advisories/51145x_refsource_MISCThird Party Advisory
Source: [email protected]
http://www.nth-dimension.org.uk/pub/NDSA20121010.txt.ascCVSS
- Attack Vector
- NETWORK
- Complexity
- LOW
- Privileges
- NONE
- User Interaction
- REQUIRED
- Scope
- UNCHANGED
- Confidentiality
- HIGH
- Integrity
- HIGH
- Availability
- HIGH
Vector?
Quick Info
StatusMODIFIED
CWE
CWE-843
Get alerted
Stop reading CVE feeds looking for your own stack
Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.
Free plan, no card