khtml/imload/scaledimageplane.h in Konqueror in KDE 4.7.3 allows remote attackers to cause a denial of service (crash) and possibly read memory via large canvas dimensions, which leads to an unexpected sign extension and a heap-based buffer over-read.
CVSS Details
- CVSS 3.1 Base Score: 7.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kdelibs-commonUpgrade kdelibs-develUpgrade kdelibsUpgrade kdelibs-apidocs | Dec 1, 2016 | Nov 11, 2012 |
| Gentoo Linux | — | Upgrade kde-base/konqueror. | Oct 30, 2017 | Nov 11, 2012 |
| Oracle_linux | — | Upgrade kdelibsUpgrade kdelibs-develUpgrade kdelibs-apidocsUpgrade kdelibs-common | Oct 16, 2024 | Nov 11, 2012 |
| Suse | — | Upgrade libksuseinstall-develUpgrade libkdecore4-32bitUpgrade libksuseinstall1Upgrade kdelibs4-docUpgrade libkde4-x86Upgrade libkdecore4-devel-debuginfoUpgrade kdelibs4-branding-upstreamUpgrade libkdecore4-debuginfoUpgrade libkde4-develUpgrade libkdecore4Upgrade sle-sdk-releaseUpgrade libksuseinstall1-debuginfo-32bitUpgrade libkde4Upgrade libksuseinstall1-debuginfo-x86Upgrade libkdecore4-x86Upgrade libksuseinstall1-32bitUpgrade libkde4-32bitUpgrade kdelibs4-apidocsUpgrade libkdecore4-debuginfo-x86Upgrade libkdecore4-debuginfo-32bitUpgrade kdelibs4-debugsourceUpgrade kdelibs4-doc-debuginfoUpgrade libkde4-debuginfo-32bitUpgrade libksuseinstall1-x86Upgrade kdelibs4-debuginfoUpgrade kdelibs4Upgrade libkdecore4-develUpgrade kdelibs4-core-debuginfoUpgrade libkde4-debuginfoUpgrade libksuseinstall1-debuginfoUpgrade libkde4-debuginfo-x86Upgrade kdelibs4-core | Dec 12, 2013 | Nov 11, 2012 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub