Lucene search

K
ubuntucveUbuntu.comUB:CVE-2012-4513
HistoryNov 11, 2012 - 12:00 a.m.

CVE-2012-4513

2012-11-1100:00:00
ubuntu.com
ubuntu.com
10

CVSS2

6.4

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:N/A:P

EPSS

0.074

Percentile

94.1%

khtml/imload/scaledimageplane.h in Konqueror in KDE 4.7.3 allows remote
attackers to cause a denial of service (crash) and possibly read memory via
large canvas dimensions, which leads to an unexpected sign extension and a
heap-based buffer over-read.

Notes

Author Note
jdstrand only 4.7.3 reported as affected. Reported as fixed in later releases

CVSS2

6.4

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:N/A:P

EPSS

0.074

Percentile

94.1%