CVE-2012-4514

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 9.7% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2012-11-11 · updated 2026-06-16

Description

rendering/render_replaced.cpp in Konqueror in KDE before 4.9.3 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted web page, related to "trying to reuse a frame with a null part."

Affected products

Kde: through 4.9.2; 1.0, 1.1, 1.1.1, 1.1.2, 1.2, 1.x (+70)

References

http://archives.neohapsis.com/archives/bugtraq/2012-11/0005.html
http://quickgit.kde.org/index.php?p=kdelibs.git&a=commitdiff&h=65464349951e0df9b5d80c2eb3cc7458d54923ae
http://www.nth-dimension.org.uk/pub/NDSA20121010.txt.asc
http://www.openwall.com/lists/oss-security/2012/10/11/11
http://www.openwall.com/lists/oss-security/2012/10/30/6
https://bugs.kde.org/show_bug.cgi?id=271528
http://archives.neohapsis.com/archives/bugtraq/2012-11/0005.html
http://quickgit.kde.org/index.php?p=kdelibs.git&a=commitdiff&h=65464349951e0df9b5d80c2eb3cc7458d54923ae
http://www.nth-dimension.org.uk/pub/NDSA20121010.txt.asc
http://www.openwall.com/lists/oss-security/2012/10/11/11
http://www.openwall.com/lists/oss-security/2012/10/30/6
https://bugs.kde.org/show_bug.cgi?id=271528

Get alerted when CVE-2012-4514 or the next vulnerability affects your stack