CVE-2012-4513

khtml/imload/scaledimageplane.h in Konqueror in KDE 4.7.3 allows remote attackers to cause a...

6.4 MediumPublic exploitFix available

CVE-2012-4513 is a medium vulnerability (CVSS 6.4) in Kde, published November 11, 2012. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 12.6%, the 96th percentile. Fixed in kdelibs 6:4.3.4-14.el6_3.2.

khtml/imload/scaledimageplane.h in Konqueror in KDE 4.7.3 allows remote attackers to cause a denial of service (crash) and possibly read memory via large canvas dimensions, which leads to an unexpected sign extension and a heap-based buffer over-read.

Exploit likelihood

12.6%Up 10.4 points since Feb 4, 2022

What each source reports

NVD Score used 6.4

Record: CVE-2012-4513
CVSS 2.0: 6.4 MediumAV:N/AC:L/Au:N/C:P/I:N/A:P
Weakness: CWE-119
Updated: 2026-11-02

CVE List No score

Record: CVE-2012-4513
Updated: 2026-11-02

EUVDEUVD-2012-4442 No score

Record: EUVD-2012-4442
Updated: 2026-11-03

GitHub AdvisoriesGHSA-w3c5-x9m9-p26v No score

khtml/imload/scaledimageplane.h in Konqueror in KDE 4.7.3 allows remote attackers to cause a...

Record: GHSA-w3c5-x9m9-p26v
Weakness: CWE-119
Updated: 2026-11-02

Affected products

Affected packages

Affected packages
Package	Affected	Fixed
`kdelibs` Red Hat:enterprise_linux:6::client	before 6:4.3.4-14.el6_3.2	6:4.3.4-14.el6_3.2
`kdelibs-common` Red Hat:enterprise_linux:6::client	before 6:4.3.4-14.el6_3.2	6:4.3.4-14.el6_3.2
`kdelibs-debuginfo` Red Hat:enterprise_linux:6::client	before 6:4.3.4-14.el6_3.2	6:4.3.4-14.el6_3.2
`kdelibs-apidocs` Red Hat:enterprise_linux:6::client	before 6:4.3.4-14.el6_3.2	6:4.3.4-14.el6_3.2
`kdelibs-devel` Red Hat:enterprise_linux:6::client	before 6:4.3.4-14.el6_3.2	6:4.3.4-14.el6_3.2
`kdelibs` Red Hat:enterprise_linux:6::computenode	before 6:4.3.4-14.el6_3.2	6:4.3.4-14.el6_3.2
`kdelibs-apidocs` Red Hat:enterprise_linux:6::computenode	before 6:4.3.4-14.el6_3.2	6:4.3.4-14.el6_3.2
`kdelibs-common` Red Hat:enterprise_linux:6::computenode	before 6:4.3.4-14.el6_3.2	6:4.3.4-14.el6_3.2
`kdelibs-debuginfo` Red Hat:enterprise_linux:6::computenode	before 6:4.3.4-14.el6_3.2	6:4.3.4-14.el6_3.2
`kdelibs-devel` Red Hat:enterprise_linux:6::computenode	before 6:4.3.4-14.el6_3.2	6:4.3.4-14.el6_3.2

Show 10 moreShow less

Affected packages
Package	Affected	Fixed
`kdelibs` Red Hat:enterprise_linux:6::server	before 6:4.3.4-14.el6_3.2	6:4.3.4-14.el6_3.2
`kdelibs-apidocs` Red Hat:enterprise_linux:6::server	before 6:4.3.4-14.el6_3.2	6:4.3.4-14.el6_3.2
`kdelibs-common` Red Hat:enterprise_linux:6::server	before 6:4.3.4-14.el6_3.2	6:4.3.4-14.el6_3.2
`kdelibs-debuginfo` Red Hat:enterprise_linux:6::server	before 6:4.3.4-14.el6_3.2	6:4.3.4-14.el6_3.2
`kdelibs-devel` Red Hat:enterprise_linux:6::server	before 6:4.3.4-14.el6_3.2	6:4.3.4-14.el6_3.2
`kdelibs` Red Hat:enterprise_linux:6::workstation	before 6:4.3.4-14.el6_3.2	6:4.3.4-14.el6_3.2
`kdelibs-apidocs` Red Hat:enterprise_linux:6::workstation	before 6:4.3.4-14.el6_3.2	6:4.3.4-14.el6_3.2
`kdelibs-common` Red Hat:enterprise_linux:6::workstation	before 6:4.3.4-14.el6_3.2	6:4.3.4-14.el6_3.2
`kdelibs-debuginfo` Red Hat:enterprise_linux:6::workstation	before 6:4.3.4-14.el6_3.2	6:4.3.4-14.el6_3.2
`kdelibs-devel` Red Hat:enterprise_linux:6::workstation	before 6:4.3.4-14.el6_3.2	6:4.3.4-14.el6_3.2

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
Source	Link	Date
Exploit-DB	Konqueror 4.7.3 - Memory Corruption	2012-11-01

History

History
When	Changed	Sources
2026-11-03	aliases	EUVD
2026-11-02	created	CVE List, Exploit-DB, GitHub Advisories, NVD, OSV

References

Show 16 moreShow less