Buffer overflow in Kde

CVE-2012-4513

khtml/imload/scaledimageplane.h in Konqueror in KDE 4.7.3 allows remote attackers to cause a denial of service (crash) and possibly read memory via large canvas dimensions, which leads to an unexpected sign extension and a heap-based buffer over-read.

Vulnerability class: Buffer Overflow

EPSS: 0.126 (95.8th percentile) — read the EPSS interpretation.

Affected products

  • Kde — versions 4.7.3
  • N/a — versions n/a

Weakness classification (CWE)

References