The CSS parser (khtml/css/cssparser.cpp) in Konqueror in KDE 4.7.3 allows remote attackers to cause a denial of service (crash) and possibly read memory via a crafted font face source, related to "type confusion."
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kdelibs-apidocsUpgrade kdelibsUpgrade kdelibs-commonUpgrade kdelibs-devel | Aug 17, 2018 | Oct 30, 2012 |
| Gentoo Linux | — | Upgrade kde-base/konqueror. | Oct 30, 2017 | Jun 27, 2014 |
| Oracle_linux | — | Upgrade kdelibs-apidocsUpgrade kdelibs-commonUpgrade kdelibsUpgrade kdelibs-devel | Oct 16, 2024 | Feb 8, 2020 |
| Suse | — | Upgrade libkdecore4-32bitUpgrade libkde4-32bitUpgrade kdelibs4-coreUpgrade libkdecore4-x86Upgrade kdelibs4-docUpgrade libkdecore4Upgrade libkde4-x86Upgrade libkde4Upgrade libkde4-develUpgrade kdelibs4Upgrade libkdecore4-devel | Dec 12, 2013 | Jun 28, 2013 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub