khtml/imload/scaledimageplane.h in Konqueror in KDE 4.7.3 allows remote attackers to cause a denial of service (crash) and possibly read memory via large canvas dimensions, which leads to an unexpected sign extension and a heap-based buffer over-read.
CVSS Details
- CVSS 3.1 Base Score: 7.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kdelibs-develUpgrade kdelibs-commonUpgrade kdelibsUpgrade kdelibs-apidocs | Dec 1, 2016 | Nov 11, 2012 |
| Gentoo Linux | — | Upgrade kde-base/konqueror. | Oct 30, 2017 | Nov 11, 2012 |
| Oracle_linux | — | Upgrade kdelibs-apidocsUpgrade kdelibs-commonUpgrade kdelibsUpgrade kdelibs-devel | Oct 16, 2024 | Nov 11, 2012 |
| Suse | — | Upgrade libkdecore4Upgrade libkde4Upgrade libkdecore4-x86Upgrade libkde4-x86Upgrade libkde4-develUpgrade kdelibs4-docUpgrade libkdecore4-32bitUpgrade libkdecore4-develUpgrade kdelibs4Upgrade kdelibs4-coreUpgrade libkde4-32bit | Dec 12, 2013 | Jun 28, 2013 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub