Every CVESearch/Get API key

CVE-2012-4512

The CSS parser (khtml/css/cssparser.cpp) in Konqueror in KDE 4.7.3 allows remote attackers to...

8.8 HighPublic exploit

CVE-2012-4512 is a high vulnerability (CVSS 8.8) in Kde, published February 8, 2020. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 11.7%, the 96th percentile. No source names a fixed version.

What does this mean?
Severity
8.8 HighCVSS 3.1, NVD
Exploit chance
11.7%EPSS, 96th percentile
Exploitation
None known1 public exploit
Fixed in
No fix listedNo source names one

Description

The CSS parser (khtml/css/cssparser.cpp) in Konqueror in KDE 4.7.3 allows remote attackers to cause a denial of service (crash) and possibly read memory via a crafted font face source, related to "type confusion."

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
Required

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
High

Exploit likelihood

11.7%Up 9.7 points since Feb 4, 2022
90%50%10%1%

Affected products

Affected packages

Affected packages
PackageAffectedFixed
kdelibs
Red Hat:enterprise_linux:6::client
From an advisory covering 2 CVEs
before 6:4.3.4-14.el6_3.2
6:4.3.4-14.el6_3.2
kdelibs-common
Red Hat:enterprise_linux:6::client
From an advisory covering 2 CVEs
before 6:4.3.4-14.el6_3.2
6:4.3.4-14.el6_3.2
kdelibs-debuginfo
Red Hat:enterprise_linux:6::client
From an advisory covering 2 CVEs
before 6:4.3.4-14.el6_3.2
6:4.3.4-14.el6_3.2
kdelibs-apidocs
Red Hat:enterprise_linux:6::client
From an advisory covering 2 CVEs
before 6:4.3.4-14.el6_3.2
6:4.3.4-14.el6_3.2
kdelibs-devel
Red Hat:enterprise_linux:6::client
From an advisory covering 2 CVEs
before 6:4.3.4-14.el6_3.2
6:4.3.4-14.el6_3.2
kdelibs
Red Hat:enterprise_linux:6::computenode
From an advisory covering 2 CVEs
before 6:4.3.4-14.el6_3.2
6:4.3.4-14.el6_3.2
kdelibs-apidocs
Red Hat:enterprise_linux:6::computenode
From an advisory covering 2 CVEs
before 6:4.3.4-14.el6_3.2
6:4.3.4-14.el6_3.2
kdelibs-common
Red Hat:enterprise_linux:6::computenode
From an advisory covering 2 CVEs
before 6:4.3.4-14.el6_3.2
6:4.3.4-14.el6_3.2
kdelibs-debuginfo
Red Hat:enterprise_linux:6::computenode
From an advisory covering 2 CVEs
before 6:4.3.4-14.el6_3.2
6:4.3.4-14.el6_3.2
kdelibs-devel
Red Hat:enterprise_linux:6::computenode
From an advisory covering 2 CVEs
before 6:4.3.4-14.el6_3.2
6:4.3.4-14.el6_3.2
Show 10 moreShow less
Affected packages
PackageAffectedFixed
kdelibs
Red Hat:enterprise_linux:6::server
From an advisory covering 2 CVEs
before 6:4.3.4-14.el6_3.2
6:4.3.4-14.el6_3.2
kdelibs-apidocs
Red Hat:enterprise_linux:6::server
From an advisory covering 2 CVEs
before 6:4.3.4-14.el6_3.2
6:4.3.4-14.el6_3.2
kdelibs-common
Red Hat:enterprise_linux:6::server
From an advisory covering 2 CVEs
before 6:4.3.4-14.el6_3.2
6:4.3.4-14.el6_3.2
kdelibs-debuginfo
Red Hat:enterprise_linux:6::server
From an advisory covering 2 CVEs
before 6:4.3.4-14.el6_3.2
6:4.3.4-14.el6_3.2
kdelibs-devel
Red Hat:enterprise_linux:6::server
From an advisory covering 2 CVEs
before 6:4.3.4-14.el6_3.2
6:4.3.4-14.el6_3.2
kdelibs
Red Hat:enterprise_linux:6::workstation
From an advisory covering 2 CVEs
before 6:4.3.4-14.el6_3.2
6:4.3.4-14.el6_3.2
kdelibs-apidocs
Red Hat:enterprise_linux:6::workstation
From an advisory covering 2 CVEs
before 6:4.3.4-14.el6_3.2
6:4.3.4-14.el6_3.2
kdelibs-common
Red Hat:enterprise_linux:6::workstation
From an advisory covering 2 CVEs
before 6:4.3.4-14.el6_3.2
6:4.3.4-14.el6_3.2
kdelibs-debuginfo
Red Hat:enterprise_linux:6::workstation
From an advisory covering 2 CVEs
before 6:4.3.4-14.el6_3.2
6:4.3.4-14.el6_3.2
kdelibs-devel
Red Hat:enterprise_linux:6::workstation
From an advisory covering 2 CVEs
before 6:4.3.4-14.el6_3.2
6:4.3.4-14.el6_3.2

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
SourceLinkDate
Exploit-DBKonqueror 4.7.3 - Memory Corruption2012-11-01

What each source reports

NVD Score used8.8

The CSS parser (khtml/css/cssparser.cpp) in Konqueror in KDE 4.7.3 allows remote attackers to cause a denial of service (crash) and possibly read memory via a crafted font face source, related to "type confusion."

Record
CVE-2012-4512
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS 2.0
6.8 MediumAV:N/AC:M/Au:N/C:P/I:P/A:P
Weakness
CWE-843
Updated
2026-11-02
CVE ListNo score

The CSS parser (khtml/css/cssparser.cpp) in Konqueror in KDE 4.7.3 allows remote attackers to cause a denial of service (crash) and possibly read memory via a crafted font face source, related to "type confusion."

Record
CVE-2012-4512
Updated
2026-11-02
EUVDEUVD-2012-4441No score

The CSS parser (khtml/css/cssparser.cpp) in Konqueror in KDE 4.7.3 allows remote attackers to cause a denial of service (crash) and possibly read memory via a crafted font face source, related to "type confusion."

Record
EUVD-2012-4441
Updated
2026-11-03
GitHub AdvisoriesGHSA-8m6q-hj66-2cmr8.8

The CSS parser (khtml/css/cssparser.cpp) in Konqueror in KDE 4.7.3 allows remote attackers to...

The CSS parser (khtml/css/cssparser.cpp) in Konqueror in KDE 4.7.3 allows remote attackers to cause a denial of service (crash) and possibly read memory via a crafted font face source, related to "type confusion."

Record
GHSA-8m6q-hj66-2cmr
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Weakness
CWE-843
Updated
2026-11-02

History

History
RecordedChangedSources
affected, facts
aliasesEUVD
first indexedCVE List, Exploit-DB, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

References

Show 18 moreShow less
PagesAll vulnerabilitiesBrowseDocsSourcesGuideGet API key
MoveEnter Open