Use-after-free vulnerability in khtml/rendering/render_replaced.cpp in Konqueror in KDE 4.7.3, when the context menu is shown, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code by accessing an iframe when it is being updated.
CVSS Details
- CVSS 3.1 Base Score: 8.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Gentoo Linux | — | Upgrade kde-base/konqueror. | Oct 30, 2017 | Nov 11, 2012 |
| Suse | — | Upgrade libkdecore4-debuginfo-32bitUpgrade kdelibs4Upgrade libkde4-debuginfo-32bitUpgrade libkdecore4-develUpgrade kdelibs4-core-debuginfoUpgrade libkde4-32bitUpgrade kdelibs4-docUpgrade kdelibs4-apidocsUpgrade kdelibs4-debuginfoUpgrade kdelibs4-doc-debuginfoUpgrade libksuseinstall1-x86Upgrade libkdecore4-debuginfo-x86Upgrade kdelibs4-coreUpgrade libksuseinstall1-32bitUpgrade libksuseinstall1-debuginfoUpgrade libkdecore4-32bitUpgrade kdelibs4-branding-upstreamUpgrade kdelibs4-debugsourceUpgrade libkdecore4-x86Upgrade libkde4-develUpgrade libksuseinstall1-debuginfo-32bitUpgrade libksuseinstall-develUpgrade libkdecore4Upgrade libkde4-debuginfo-x86Upgrade libkde4-x86Upgrade libkde4-debuginfoUpgrade libksuseinstall1Upgrade libksuseinstall1-debuginfo-x86Upgrade libkdecore4-debuginfoUpgrade libkdecore4-devel-debuginfoUpgrade sle-sdk-releaseUpgrade libkde4 | Dec 12, 2013 | Nov 11, 2012 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub