The CSS parser (khtml/css/cssparser.cpp) in Konqueror in KDE 4.7.3 allows remote attackers to cause a denial of service (crash) and possibly read memory via a crafted font face source, related to "type confusion."
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kdelibsUpgrade kdelibs-commonUpgrade kdelibs-apidocsUpgrade kdelibs-devel | Aug 17, 2018 | Oct 30, 2012 |
| Gentoo Linux | — | Upgrade kde-base/konqueror. | Oct 30, 2017 | Jun 27, 2014 |
| Oracle_linux | — | Upgrade kdelibs-develUpgrade kdelibsUpgrade kdelibs-commonUpgrade kdelibs-apidocs | Oct 16, 2024 | Feb 8, 2020 |
| Suse | — | Upgrade sle-sdk-releaseUpgrade libkdecore4-devel-debuginfoUpgrade kdelibs4-coreUpgrade kdelibs4-debuginfoUpgrade libksuseinstall1-debuginfoUpgrade libkdecore4-32bitUpgrade libkde4-debuginfo-32bitUpgrade libkde4-32bitUpgrade libksuseinstall-develUpgrade kdelibs4-apidocsUpgrade libkdecore4-x86Upgrade libkdecore4-debuginfoUpgrade kdelibs4-debugsourceUpgrade libkdecore4-debuginfo-x86Upgrade libksuseinstall1-32bitUpgrade libkdecore4-debuginfo-32bitUpgrade libkdecore4-develUpgrade kdelibs4Upgrade kdelibs4-docUpgrade libkde4-debuginfo-x86Upgrade kdelibs4-doc-debuginfoUpgrade libksuseinstall1-x86Upgrade libksuseinstall1Upgrade libkde4Upgrade libksuseinstall1-debuginfo-32bitUpgrade kdelibs4-branding-upstreamUpgrade libksuseinstall1-debuginfo-x86Upgrade libkdecore4Upgrade libkde4-debuginfoUpgrade kdelibs4-core-debuginfoUpgrade libkde4-develUpgrade libkde4-x86 | Dec 12, 2013 | Dec 10, 2013 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub