CVE-2012-4512

The CSS parser (khtml/css/cssparser.cpp) in Konqueror in KDE 4.7.3 allows remote attackers to cause a denial of service (crash) and possibly read memory via a crafted font face source, related to "type confusion."

• CWE-843

• http://archives.neohapsis.com/archives/bugtraq/2012-11/0005.htmlBroken Link, Third Party Advisory
• http://em386.blogspot.com/2010/12/webkit-css-type-confusion.htmlExploit, Third Party Advisory
• http://quickgit.kde.org/index.php?p=kdelibs.git&a=commitdiff&h=a872c8a969a8bd3706253d6ba24088e4f07f3352Broken Link, Vendor Advisory
• http://rhn.redhat.com/errata/RHSA-2012-1416.htmlThird Party Advisory
• http://rhn.redhat.com/errata/RHSA-2012-1418.htmlThird Party Advisory
• http://secunia.com/advisories/51097Not Applicable, Third Party Advisory
• http://secunia.com/advisories/51145Not Applicable, Third Party Advisory
• http://www.nth-dimension.org.uk/pub/NDSA20121010.txt.ascThird Party Advisory
• http://www.openwall.com/lists/oss-security/2012/10/11/11Mailing List, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2012/10/30/6Mailing List, Third Party Advisory
• http://www.securitytracker.com/id?1027709Third Party Advisory, VDB Entry
• http://archives.neohapsis.com/archives/bugtraq/2012-11/0005.htmlBroken Link, Third Party Advisory
• http://em386.blogspot.com/2010/12/webkit-css-type-confusion.htmlExploit, Third Party Advisory
• http://quickgit.kde.org/index.php?p=kdelibs.git&a=commitdiff&h=a872c8a969a8bd3706253d6ba24088e4f07f3352Broken Link, Vendor Advisory
• http://rhn.redhat.com/errata/RHSA-2012-1416.htmlThird Party Advisory
• http://rhn.redhat.com/errata/RHSA-2012-1418.htmlThird Party Advisory
• http://secunia.com/advisories/51097Not Applicable, Third Party Advisory
• http://secunia.com/advisories/51145Not Applicable, Third Party Advisory
• http://www.nth-dimension.org.uk/pub/NDSA20121010.txt.ascThird Party Advisory
• http://www.openwall.com/lists/oss-security/2012/10/11/11Mailing List, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2012/10/30/6Mailing List, Third Party Advisory
• http://www.securitytracker.com/id?1027709Third Party Advisory, VDB Entry

Published

Feb 8, 2020

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2012-4506Directory traversal vulnerability in gitolite 3.x before 3.1…
• CVE-2012-4507The strchr function in procmime.c in Claws Mail (aka claws-m…
• CVE-2012-4508Race condition in fs/ext4/extents.c in the Linux kernel befo…
• CVE-2012-4509Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2012-4510cups-pk-helper before 0.2.3 does not properly wrap the (1) c…
• CVE-2012-4511services/flickr/flickr.c in libsocialweb before 0.25.21 auto…
• CVE-2012-4513khtml/imload/scaledimageplane.h in Konqueror in KDE 4.7.3 al…
• CVE-2012-4514rendering/render_replaced.cpp in Konqueror in KDE before 4.9…
• CVE-2012-4515Use-after-free vulnerability in khtml/rendering/render_repla…
• CVE-2012-4516librdmacm 1.0.16, when ibacm.port is not specified, connects…
• CVE-2012-4517ibacm before 1.0.6 does not properly manage reference counts…
• CVE-2012-4518ibacm 1.0.7 creates files with world-writable permissions, w…