cve/2012/CVE-2012-4512.md

19 lines
776 B
Markdown
Raw Normal View History

2024-05-26 14:27:05 +02:00
### [CVE-2012-4512](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4512)
![](https://img.shields.io/static/v1?label=Product&message=Konqueror&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=%3D%204.7.3%20&color=brighgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=Other&color=brighgreen)
### Description
The CSS parser (khtml/css/cssparser.cpp) in Konqueror in KDE 4.7.3 allows remote attackers to cause a denial of service (crash) and possibly read memory via a crafted font face source, related to "type confusion."
### POC
#### Reference
- http://em386.blogspot.com/2010/12/webkit-css-type-confusion.html
- http://www.nth-dimension.org.uk/pub/NDSA20121010.txt.asc
#### Github
No PoCs found on GitHub currently.