CVE-2012-4515

Use-after-free vulnerability in khtml/rendering/render_replaced.cpp in Konqueror in KDE 4.7.3, when the context menu is shown, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code by accessing an iframe when it is being updated.

• CWE-399

• http://archives.neohapsis.com/archives/bugtraq/2012-11/0005.html
• http://quickgit.kde.org/index.php?p=kdelibs.git&a=commitdiff&h=4f2eb356f1c23444fff2cfe0a7ae10efe303d6d8Exploit
• http://secunia.com/advisories/51097Vendor Advisory
• http://secunia.com/advisories/51145Vendor Advisory
• http://www.nth-dimension.org.uk/pub/NDSA20121010.txt.ascExploit
• http://www.openwall.com/lists/oss-security/2012/10/11/11
• http://www.openwall.com/lists/oss-security/2012/10/30/6
• http://archives.neohapsis.com/archives/bugtraq/2012-11/0005.html
• http://quickgit.kde.org/index.php?p=kdelibs.git&a=commitdiff&h=4f2eb356f1c23444fff2cfe0a7ae10efe303d6d8Exploit
• http://secunia.com/advisories/51097Vendor Advisory
• http://secunia.com/advisories/51145Vendor Advisory
• http://www.nth-dimension.org.uk/pub/NDSA20121010.txt.ascExploit
• http://www.openwall.com/lists/oss-security/2012/10/11/11
• http://www.openwall.com/lists/oss-security/2012/10/30/6

Published

Nov 11, 2012

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2012-4509Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2012-4510cups-pk-helper before 0.2.3 does not properly wrap the (1) c…
• CVE-2012-4511services/flickr/flickr.c in libsocialweb before 0.25.21 auto…
• CVE-2012-4512The CSS parser (khtml/css/cssparser.cpp) in Konqueror in KDE…8.8
• CVE-2012-4513khtml/imload/scaledimageplane.h in Konqueror in KDE 4.7.3 al…
• CVE-2012-4514rendering/render_replaced.cpp in Konqueror in KDE before 4.9…
• CVE-2012-4516librdmacm 1.0.16, when ibacm.port is not specified, connects…
• CVE-2012-4517ibacm before 1.0.6 does not properly manage reference counts…
• CVE-2012-4518ibacm 1.0.7 creates files with world-writable permissions, w…
• CVE-2012-4519Zenphoto before 1.4.3.4 admin-news-articles.php date paramet…6.1
• CVE-2012-4520The django.http.HttpRequest.get_host function in Django 1.3.…
• CVE-2012-4521Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…