CVE-2012-4512
High · 8.8CVSS
8.8
EPSS
11.7%
Published
Feb 8, 2020
CISA due date
—
The record
The CSS parser (khtml/css/cssparser.cpp) in Konqueror in KDE 4.7.3 allows remote attackers to cause a denial of service (crash) and possibly read memory via a crafted font face source, related to "type confusion."
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Red Hat:enterprise_linux:6::client | kdelibs | 0 | 6:4.3.4-14.el6_3.2 |
| Red Hat:enterprise_linux:6::client | kdelibs-apidocs | 0 | 6:4.3.4-14.el6_3.2 |
| Red Hat:enterprise_linux:6::client | kdelibs-common | 0 | 6:4.3.4-14.el6_3.2 |
| Red Hat:enterprise_linux:6::client | kdelibs-debuginfo | 0 | 6:4.3.4-14.el6_3.2 |
| Red Hat:enterprise_linux:6::client | kdelibs-devel | 0 | 6:4.3.4-14.el6_3.2 |
| Red Hat:enterprise_linux:6::computenode | kdelibs | 0 | 6:4.3.4-14.el6_3.2 |
| Red Hat:enterprise_linux:6::computenode | kdelibs-apidocs | 0 | 6:4.3.4-14.el6_3.2 |
| Red Hat:enterprise_linux:6::computenode | kdelibs-common | 0 | 6:4.3.4-14.el6_3.2 |
| Red Hat:enterprise_linux:6::computenode | kdelibs-debuginfo | 0 | 6:4.3.4-14.el6_3.2 |
| Red Hat:enterprise_linux:6::computenode | kdelibs-devel | 0 | 6:4.3.4-14.el6_3.2 |
| Red Hat:enterprise_linux:6::server | kdelibs | 0 | 6:4.3.4-14.el6_3.2 |
| Red Hat:enterprise_linux:6::server | kdelibs-apidocs | 0 | 6:4.3.4-14.el6_3.2 |
| Red Hat:enterprise_linux:6::server | kdelibs-common | 0 | 6:4.3.4-14.el6_3.2 |
| Red Hat:enterprise_linux:6::server | kdelibs-debuginfo | 0 | 6:4.3.4-14.el6_3.2 |
| Red Hat:enterprise_linux:6::server | kdelibs-devel | 0 | 6:4.3.4-14.el6_3.2 |
| Red Hat:enterprise_linux:6::workstation | kdelibs | 0 | 6:4.3.4-14.el6_3.2 |
| Red Hat:enterprise_linux:6::workstation | kdelibs-apidocs | 0 | 6:4.3.4-14.el6_3.2 |
| Red Hat:enterprise_linux:6::workstation | kdelibs-common | 0 | 6:4.3.4-14.el6_3.2 |
| Red Hat:enterprise_linux:6::workstation | kdelibs-debuginfo | 0 | 6:4.3.4-14.el6_3.2 |
| Red Hat:enterprise_linux:6::workstation | kdelibs-devel | 0 | 6:4.3.4-14.el6_3.2 |
Related vulnerabilities
- CVE-2012-4513 khtml/imload/scaledimageplane.h in Konqueror in KDE 4.7.3 allows remote attackers to… Also affects kdelibs
- CVE-2026-109282 ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a type confusion flaw in… CWE-843
- CVE-2026-106587 In sshd in OpenSSH before 10.6, the value "none" for a configuration option is sometimes… CWE-843
- CVE-2026-106446 Handlebars provides the power necessary to let users build semantic templates. CWE-843
- CVE-2026-101912 ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in… CWE-843
- CVE-2026-15461 The Sierra Wireless HL78xx modem GNSS driver (drivers/modem/hl78xx/, later… CWE-843
- CVE-2026-87636 Type confusion in XML in Google Chrome prior to 153.0.8010.36 allowed a remote attacker… CWE-843
- CVE-2026-87612 Type confusion in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to… CWE-843