Public exploit available
Public proof-of-concept or exploit code exists (ExploitDB / Metasploit / Nuclei).

CVE-2012-4514

CWE-476 — NULL Pointer Dereference7 documents6 sources
Severity
5.0MEDIUM
EPSS
4.9%
top 10.44%
CISA KEV
Not in KEV
Exploit
PoC available
Public exploit / PoC exists
Affected products
1
KDE KDE
Timeline
PublishedNov 11
Latest updateMay 17

Description

rendering/render_replaced.cpp in Konqueror in KDE before 4.9.3 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted web page, related to "trying to reuse a frame with a null part."

CVSS vector

AV:N/AC:L/C:N/I:N/A:PExploitability: 10.0 | Impact: 2.9

Affected Packages1 packages

▶NVDkde/kde4.9.2+76

🔴Vulnerability Details

2
GHSA
GHSA-gv8j-6fjv-8p98: rendering/render_replaced↗2022-05-17
▶
CVEList
CVE-2012-4514: rendering/render_replaced↗2012-11-11
▶

💥Exploits & PoCs

1
Exploit-DB
Konqueror 4.7.3 - Memory Corruption↗2012-11-01
▶

📋Vendor Advisories

1
Red Hat
(khtml): NULL pointer dereference when trying to reuse a frame with null part↗2012-10-30
▶

💬Community

2
Bugzilla
CVE-2012-4514 CVE-2012-4515 kdelibs various flaws [fedora-all]↗2012-10-30
▶
Bugzilla
CVE-2012-4514 kdelibs (khtml): NULL pointer dereference when trying to reuse a frame with null part↗2012-10-24
▶