Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2012-4488 State: PUBLISHED Published: 2012-10-31T16:00:00Z Last Updated: 2024-09-16T17:43:26.263Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Location module 6.x before 6.x-3.2 and 7.x before 7.x-3.0-alpha1 for Drupal does not properly check user or node access permissions, which allows remote attackers to read node or user results via the location search page. Additional Analyst Notes: - CVE Program Container: References: - http://drupal.org/node/1700588 - http://www.openwall.com/lists/oss-security/2012/10/04/6 - http://www.openwall.com/lists/oss-security/2012/10/07/1 - http://drupal.org/node/1699962 - http://drupal.org/node/1699984
CVE ID: CVE-2012-4489 State: PUBLISHED Published: 2012-10-31T16:00:00 Last Updated: 2024-08-06T20:35:09.832Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open redirect vulnerability in the securelogin_secure_redirect function in the Secure Login module 7.x-1.x before 7.x-1.3 for Drupal allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the q parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2012/10/04/6 - http://drupalcode.org/project/securelogin.git/commitdiff/88518df - https://drupal.org/node/1698988 - https://drupal.org/node/1692976 - http://www.securi
curelogin.git/commitdiff/88518df - https://drupal.org/node/1698988 - https://drupal.org/node/1692976 - http://www.securityfocus.com/bid/54675 - http://www.openwall.com/lists/oss-security/2012/10/07/1 - http://drupal.org/node/1700594
CVE ID: CVE-2012-4490 State: PUBLISHED Published: 2012-10-31T16:00:00 Last Updated: 2024-08-06T20:35:09.932Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the Excluded Users module 6.x-1.x before 6.x-1.1 for Drupal allow remote attackers to inject arbitrary web script or HTML via a (1) user name or (2) email address. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/54766 - http://www.openwall.com/lists/oss-security/2012/10/04/6 - http://www.openwall.com/lists/oss-security/2012/10/07/1 - http://drupal.org/node/1708058 - http://drupal.org/node/1702984
CVE ID: CVE-2012-4491 State: PUBLISHED Published: 2012-10-31T16:00:00 Last Updated: 2024-08-06T20:35:09.806Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Monthly Archive by Node Type module 6.x for Drupal does not properly check permissions defined by node_access modules, which allows remote attackers to access restricted nodes via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2012/10/04/6 - http://www.securityfocus.com/bid/54768 - http://drupal.org/node/1708198 - http://www.openwall.com/lists/oss-security/2012/10/07/1
CVE ID: CVE-2012-4492 State: PUBLISHED Published: 2012-10-31T16:00:00 Last Updated: 2024-08-06T20:35:09.921Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the Shorten URLs module 6.x-1.x before 6.x-1.13 and 7.x-1.x before 7.x-1.2 for Drupal allow remote authenticated users with certain permissions to inject arbitrary web script or HTML via unspecified vectors to the (1) report or (2) Custom Services List page. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2012/10/04/6 - https://drupal.org/node/1719310 - http://drupal.org/node/1719392 - https://drupal.org/node/1719
-security/2012/10/04/6 - https://drupal.org/node/1719310 - http://drupal.org/node/1719392 - https://drupal.org/node/1719306 - http://www.securityfocus.com/bid/54911 - http://www.openwall.com/lists/oss-security/2012/10/07/1
CVE ID: CVE-2012-4493 State: PUBLISHED Published: 2012-11-02T15:00:00Z Last Updated: 2024-09-16T22:26:20.610Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the administrative interface in the Better Revisions module 7.x-1.x before 7.x-1.1 for Drupal allows remote authenticated users with the "administer better revisions" permission to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2012/10/04/6 - http://drupal.org/node/1713378 - http://drupal.org/node/1719402 - http://www.openwall.com/lists/oss-security/2012/10/07/1
CVE ID: CVE-2012-4494 State: PUBLISHED Published: 2012-10-31T16:00:00Z Last Updated: 2024-09-17T01:41:46.312Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Shibboleth authentication module 7.x-4.0 for Drupal does not properly check the active status of users, which allows remote blocked users to access bypass intended access restrictions and possibly have other impacts by logging in. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2012/10/04/6 - http://drupal.org/node/1493244 - http://drupal.org/node/1719392 - http://www.openwall.com/lists/oss-security/2012/10/07/1 - http://drupalcode.org/project/shib_auth.git/commi
de/1719392 - http://www.openwall.com/lists/oss-security/2012/10/07/1 - http://drupalcode.org/project/shib_auth.git/commitdiff/2032f0a
CVE ID: CVE-2012-4495 State: PUBLISHED Published: 2012-10-31T16:00:00 Last Updated: 2024-08-06T20:35:09.925Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Mime Mail module 6.x-1.x before 6.x-1.1 for Drupal does not properly restrict access to files outside Drupal's publish files directory, which allows remote authenticated users to send arbitrary files as attachments. Additional Analyst Notes: - CVE Program Container: References: - http://drupal.org/node/1719446 - http://www.openwall.com/lists/oss-security/2012/10/04/6 - http://www.securityfocus.com/bid/54914 - http://drupalcode.org/project/mimemail.git/commitdiff/ae065d1 - http://drupal.org/node/1719482 - http://www.openwal
14 - http://drupalcode.org/project/mimemail.git/commitdiff/ae065d1 - http://drupal.org/node/1719482 - http://www.openwall.com/lists/oss-security/2012/10/07/1
CVE ID: CVE-2012-4496 State: PUBLISHED Published: 2012-10-31T16:00:00 Last Updated: 2024-08-06T20:35:09.910Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Custom Publishing Options module 6.x-1.x before 6.x-1.4 for Drupal allows remote authenticated users with the "administer nodes" permission to inject arbitrary web script or HTML via the status labels parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2012/10/04/6 - http://www.madirish.net/538 - http://secunia.com/advisories/50256 - http://drupal.org/node/1730766 - http://www.securityfocus.com/bid/55037 - http://
http://secunia.com/advisories/50256 - http://drupal.org/node/1730766 - http://www.securityfocus.com/bid/55037 - http://www.openwall.com/lists/oss-security/2012/10/07/1 - https://drupal.org/node/1732980
CVE ID: CVE-2012-4497 State: PUBLISHED Published: 2012-11-02T15:00:00 Last Updated: 2024-08-06T20:35:09.905Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the "3 slide gallery" in the Elegant Theme module 7.x-1.x before 7.x-1.1 for Drupal allows remote authenticated users with the "administer themes" permission to inject arbitrary web script or HTML via a slide URL. Additional Analyst Notes: - CVE Program Container: References: - http://drupal.org/node/1733056 - http://www.openwall.com/lists/oss-security/2012/10/04/6 - http://drupal.org/node/1722880 - http://drupalcode.org/project/elegant_theme.git/commitdiff/bdea7b1 - http://secunia.c
- http://drupal.org/node/1722880 - http://drupalcode.org/project/elegant_theme.git/commitdiff/bdea7b1 - http://secunia.com/advisories/50273 - http://www.securityfocus.com/bid/55043 - http://www.openwall.com/lists/oss-security/2012/10/07/1
CVE ID: CVE-2012-4498 State: PUBLISHED Published: 2012-11-02T15:00:00Z Last Updated: 2024-09-16T23:05:51.202Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Activism module 6.x-2.x before 6.x-2.1 for Drupal does not properly restrict access to the "Campaign" content type, which might allow remote attackers to bypass access restrictions and possibly have other unspecified impact. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2012/10/04/6 - http://drupal.org/node/1762160 - http://www.openwall.com/lists/oss-security/2012/10/07/1 - http://drupal.org/node/1762152
CVE ID: CVE-2012-4499 State: PUBLISHED Published: 2012-10-31T16:00:00Z Last Updated: 2024-09-17T01:51:20.961Z Vendors: n/a Products: n/a Problem Types: n/a Description: The contact formatter page in the Email Field module 6.x-1.x before 6.x-1.2 and 7.x-1.x before 7.x-1.1 for Drupal allows remote attackers to email the stored address in the entity via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2012/10/04/6 - http://drupal.org/node/1762470 - http://drupal.org/node/1761968 - http://drupal.org/node/1761948 - http://www.openwall.com/lists/oss-security/2012/10/07/1
CVE ID: CVE-2012-4500 State: PUBLISHED Published: 2012-10-31T16:00:00 Last Updated: 2024-08-06T20:35:09.933Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Announcements module 6.x-1.x before 6.x-1.5 for Drupal allows remote authenticated users with the "access announcements" permission to bypass node access restrictions and possibly have other unspecified impact. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2012/10/04/6 - http://drupal.org/node/1761038 - http://drupal.org/node/1762480 - http://www.securityfocus.com/bid/55283 - http://www.openwall.com/lists/oss-security/2012/10/07/1
CVE ID: CVE-2012-4501 State: PUBLISHED Published: 2012-10-26T10:00:00Z Last Updated: 2024-09-17T00:41:27.302Z Vendors: n/a Products: n/a Problem Types: n/a Description: Citrix Cloud.com CloudStack, and Apache CloudStack pre-release, allows remote attackers to make arbitrary API calls by leveraging the system user account, as demonstrated by API calls to delete VMs. Additional Analyst Notes: - CVE Program Container: References: - http://markmail.org/thread/yfuxgymdqwg3kcg4 - http://archives.neohapsis.com/archives/bugtraq/2012-10/0062.html - http://cloudstack.org/blog/185-cloudstack-configuration-vulnerability-discovered.html
CVE ID: CVE-2012-4502 State: PUBLISHED Published: 2013-11-05T21:00:00Z Last Updated: 2024-09-17T04:24:42.253Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple integer overflows in pktlength.c in Chrony before 1.29 allow remote attackers to cause a denial of service (crash) via a crafted (1) REQ_SUBNETS_ACCESSED or (2) REQ_CLIENT_ACCESSES command request to the PKL_CommandLength function or crafted (3) RPY_SUBNETS_ACCESSED, (4) RPY_CLIENT_ACCESSES, (5) RPY_CLIENT_ACCESSES_BY_INDEX, or (6) RPY_MANUAL_LIST command reply to the PKL_ReplyLength function, which triggers an out-of-bounds read or buffer overflow. NOTE: versions 1.27 and 1.28 do not require authentication to exploi
triggers an out-of-bounds read or buffer overflow. NOTE: versions 1.27 and 1.28 do not require authentication to exploit. Additional Analyst Notes: - CVE Program Container: References: - http://permalink.gmane.org/gmane.comp.time.chrony.announce/15 - http://www.debian.org/security/2013/dsa-2760 - http://seclists.org/oss-sec/2013/q3/332 - http://git.tuxfamily.org/chrony/chrony.git/?p=chrony/chrony.git%3Ba=commitdiff%3Bh=7712455d9aa33d0db0945effaa07e900b85987b1 - https://bugzilla.redhat.com/show_bug.cgi?id=846392
CVE ID: CVE-2012-4503 State: PUBLISHED Published: 2013-11-05T21:00:00Z Last Updated: 2024-09-16T16:14:03.196Z Vendors: n/a Products: n/a Problem Types: n/a Description: cmdmon.c in Chrony before 1.29 allows remote attackers to obtain potentially sensitive information from stack memory via vectors related to (1) an invalid subnet in a RPY_SUBNETS_ACCESSED command to the handle_subnets_accessed function or (2) a RPY_CLIENT_ACCESSES command to the handle_client_accesses function when client logging is disabled, which causes uninitialized data to be included in a reply. Additional Analyst Notes: - CVE Program Container: References: - http://permalink.gmane.org/gmane.comp.time.chrony.announce/15
nal Analyst Notes: - CVE Program Container: References: - http://permalink.gmane.org/gmane.comp.time.chrony.announce/15 - http://www.debian.org/security/2013/dsa-2760 - http://seclists.org/oss-sec/2013/q3/332 - http://git.tuxfamily.org/chrony/chrony.git/?p=chrony/chrony.git%3Ba=commitdiff%3Bh=c6fdeeb6bb0b17dc28c19ae492c4a1c498e54ea3 - https://bugzilla.redhat.com/show_bug.cgi?id=846392
CVE ID: CVE-2012-4504 State: PUBLISHED Published: 2012-11-11T11:00:00 Last Updated: 2024-08-06T20:35:10.043Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the url::get_pac function in url.cpp in libproxy 0.4.x before 0.4.9 allows remote servers to have an unspecified impact via a large proxy.pac file. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-updates/2012-10/msg00065.html - http://secunia.com/advisories/51048 - http://www.securityfocus.com/bid/55909 - https://groups.google.com/forum/?fromgroups=#%21topic/libproxy/VxZ8No7mT0E - https://bugzilla.redhat.com/show_bug.cgi?id=864417 - http://www.u
com/forum/?fromgroups=#%21topic/libproxy/VxZ8No7mT0E - https://bugzilla.redhat.com/show_bug.cgi?id=864417 - http://www.ubuntu.com/usn/USN-1629-1 - http://www.openwall.com/lists/oss-security/2012/10/12/1 - http://www.openwall.com/lists/oss-security/2012/10/12/5 - http://code.google.com/p/libproxy/source/detail?r=853 - https://exchange.xforce.ibmcloud.com/vulnerabilities/79249 - http://www.openwall.com/lists/oss-security/2012/10/16/3
CVE ID: CVE-2012-4505 State: PUBLISHED Published: 2012-11-11T11:00:00 Last Updated: 2024-08-06T20:35:09.950Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the px_pac_reload function in lib/pac.c in libproxy 0.2.x and 0.3.x allows remote servers to have an unspecified impact via a crafted Content-Length size in an HTTP response header for a proxy.pac file request, a different vulnerability than CVE-2012-4504. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-updates/2012-10/msg00065.html - http://secunia.com/advisories/51048 - http://rhn.redhat.com/errata/RHSA-2012-1461.html - https://groups.google.co
html - http://secunia.com/advisories/51048 - http://rhn.redhat.com/errata/RHSA-2012-1461.html - https://groups.google.com/forum/?fromgroups=#%21topic/libproxy/VxZ8No7mT0E - http://www.ubuntu.com/usn/USN-1629-1 - http://www.openwall.com/lists/oss-security/2012/10/12/1 - http://www.openwall.com/lists/oss-security/2012/10/12/5 - http://www.debian.org/security/2012/dsa-2571 - http://secunia.com/advisories/51180 - http://secunia.com/advisories/51308 - http://www.securityfocus.com/bid/55910 - http://www.openwall.com/lists/oss-security/2012/10/16/3 - https://bugzilla.redhat.com/show_bug.cgi?id=864612
CVE ID: CVE-2012-4506 State: PUBLISHED Published: 2012-10-22T23:00:00 Last Updated: 2024-08-06T20:35:09.932Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in gitolite 3.x before 3.1, when wild card repositories and a pattern matching "../" are enabled, allows remote authenticated users to create arbitrary repositories and possibly perform other actions via a .. (dot dot) in a repository name. Additional Analyst Notes: - CVE Program Container: References: - https://groups.google.com/forum/#%21topic/gitolite/K9SnQNhCQ-0/discussion - http://www.securityfocus.com/bid/55853 - https://github.com/sitaramc/gitolite/commit/f636ce3ba3e340569b26d1e47b9d9b6
n - http://www.securityfocus.com/bid/55853 - https://github.com/sitaramc/gitolite/commit/f636ce3ba3e340569b26d1e47b9d9b62dd8a3bf2 - http://www.openwall.com/lists/oss-security/2012/10/10/1 - http://secunia.com/advisories/50896 - http://www.openwall.com/lists/oss-security/2012/10/10/2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/79130
CVE ID: CVE-2012-4507 State: PUBLISHED Published: 2012-10-22T23:00:00 Last Updated: 2024-08-06T20:35:09.999Z Vendors: n/a Products: n/a Problem Types: n/a Description: The strchr function in procmime.c in Claws Mail (aka claws-mail) 3.8.1 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a crafted email. Additional Analyst Notes: - CVE Program Container: References: - http://www.thewildbeast.co.uk/claws-mail/bugzilla/show_bug.cgi?id=2743 - http://www.openwall.com/lists/oss-security/2012/10/09/1 - http://lists.opensuse.org/opensuse-updates/2012-10/msg00064.html - http://www.openwall.com/lists/oss-security/2012/10/10/3 - http://www.openwall.com/lists
-updates/2012-10/msg00064.html - http://www.openwall.com/lists/oss-security/2012/10/10/3 - http://www.openwall.com/lists/oss-security/2012/10/09/3 - http://www.securityfocus.com/bid/55837 - https://bugzilla.redhat.com/show_bug.cgi?id=862578
CVE ID: CVE-2012-4508 State: PUBLISHED Published: 2012-12-21T11:00:00 Last Updated: 2024-08-06T20:35:09.974Z Vendors: n/a Products: n/a Problem Types: n/a Description: Race condition in fs/ext4/extents.c in the Linux kernel before 3.4.16 allows local users to obtain sensitive information from a deleted file by reading an extent that was not properly marked as uninitialized. Additional Analyst Notes: - CVE Program Container: References: - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=dee1f973ca341c266229faa5a1a5bb268bed3531 - http://rhn.redhat.com/errata/RHSA-2012-1540.html - http://rhn.redhat.com/errata/RHSA-2013-0496.html - http://rhn.redhat.com/errata/RHSA
at.com/errata/RHSA-2012-1540.html - http://rhn.redhat.com/errata/RHSA-2013-0496.html - http://rhn.redhat.com/errata/RHSA-2013-1783.html - http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.4.16 - http://www.ubuntu.com/usn/USN-1645-1 - http://www.ubuntu.com/usn/USN-1899-1 - http://rhn.redhat.com/errata/RHSA-2013-1519.html - https://www.suse.com/support/update/announcement/2012/suse-su-20121679-1.html - https://github.com/torvalds/linux/commit/dee1f973ca341c266229faa5a1a5bb268bed3531 - http://lists.fedoraproject.org/pipermail/package-announce/2012-November/091110.html - https://bugzilla.redhat.com/show_bug.cgi?id=869904 - http://www.openwall.com/lists/oss-security/2012/10/25/1 - http://ww
https://bugzilla.redhat.com/show_bug.cgi?id=869904 - http://www.openwall.com/lists/oss-security/2012/10/25/1 - http://www.ubuntu.com/usn/USN-1900-1
CVE ID: CVE-2012-4509 State: REJECTED Published: 2021-07-09T11:42:45 Last Updated: 2021-07-09T11:42:45 Description: No description available.
CVE ID: CVE-2012-4510 State: PUBLISHED Published: 2012-11-20T00:00:00 Last Updated: 2024-08-06T20:35:10.050Z Vendors: n/a Products: n/a Problem Types: n/a Description: cups-pk-helper before 0.2.3 does not properly wrap the (1) cupsGetFile and (2) cupsPutFile function calls, which allows user-assisted remote attackers to read or overwrite sensitive files using CUPS resources. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2012/10/12/2 - http://www.debian.org/security/2012/dsa-2562 - http://www.mandriva.com/security/advisories?name=MDVSA-2013:069
CVE ID: CVE-2012-4511 State: PUBLISHED Published: 2012-10-22T23:00:00 Last Updated: 2024-08-06T20:35:10.061Z Vendors: n/a Products: n/a Problem Types: n/a Description: services/flickr/flickr.c in libsocialweb before 0.25.21 automatically connects to Flickr when no Flickr account is set, which might allow remote attackers to obtain sensitive information via a man-in-the-middle (MITM) attack. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=863206 - http://www.openwall.com/lists/oss-security/2012/10/10/10 - http://www.openwall.com/lists/oss-security/2012/10/23/5 - http://git.gnome.org/browse/libsocialweb/commit/?id=8c28ae1d5db55290206
w.openwall.com/lists/oss-security/2012/10/23/5 - http://git.gnome.org/browse/libsocialweb/commit/?id=8c28ae1d5db5529020652cee3700c75341625503 - http://www.openwall.com/lists/oss-security/2012/10/11/1
CVE ID: CVE-2012-4512 State: PUBLISHED Published: 2020-02-08T18:09:56 Last Updated: 2024-08-06T20:35:09.972Z Vendors: KDE Products: Konqueror Problem Types: Other Description: The CSS parser (khtml/css/cssparser.cpp) in Konqueror in KDE 4.7.3 allows remote attackers to cause a denial of service (crash) and possibly read memory via a crafted font face source, related to "type confusion." Additional Analyst Notes: - CVE Program Container: References: - http://www.nth-dimension.org.uk/pub/NDSA20121010.txt.asc - http://em386.blogspot.com/2010/12/webkit-css-type-confusion.html - http://archives.neohapsis.com/archives/bugtraq/2012-11/0005.html - http://www.openwall.com/lists/oss-security/2012/10/1
http://archives.neohapsis.com/archives/bugtraq/2012-11/0005.html - http://www.openwall.com/lists/oss-security/2012/10/11/11 - http://www.openwall.com/lists/oss-security/2012/10/30/6 - http://quickgit.kde.org/index.php?p=kdelibs.git&a=commitdiff&h=a872c8a969a8bd3706253d6ba24088e4f07f3352 - http://rhn.redhat.com/errata/RHSA-2012-1416.html - http://rhn.redhat.com/errata/RHSA-2012-1418.html - http://www.securitytracker.com/id?1027709 - http://secunia.com/advisories/51097 - http://secunia.com/advisories/51145
CVE ID: CVE-2012-4513 State: PUBLISHED Published: 2012-11-11T11:00:00Z Last Updated: 2024-08-06T20:35:10.046Z Vendors: n/a Products: n/a Problem Types: n/a Description: khtml/imload/scaledimageplane.h in Konqueror in KDE 4.7.3 allows remote attackers to cause a denial of service (crash) and possibly read memory via large canvas dimensions, which leads to an unexpected sign extension and a heap-based buffer over-read. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/51145 - http://quickgit.kde.org/index.php?p=kdelibs.git&a=commitdiff&h=1f8b1b034ccf1713a5d123a4c327290f86d17d53 - http://rhn.redhat.com/errata/RHSA-2012-1418.html - http://rhn.redhat.c
diff&h=1f8b1b034ccf1713a5d123a4c327290f86d17d53 - http://rhn.redhat.com/errata/RHSA-2012-1418.html - http://rhn.redhat.com/errata/RHSA-2012-1416.html - http://www.securitytracker.com/id?1027709 - http://www.nth-dimension.org.uk/pub/NDSA20121010.txt.asc - http://www.openwall.com/lists/oss-security/2012/10/11/11 - http://archives.neohapsis.com/archives/bugtraq/2012-11/0005.html - http://www.openwall.com/lists/oss-security/2012/10/30/6 - http://secunia.com/advisories/51097
CVE ID: CVE-2012-4514 State: PUBLISHED Published: 2012-11-11T11:00:00Z Last Updated: 2024-08-06T20:35:09.931Z Vendors: n/a Products: n/a Problem Types: n/a Description: rendering/render_replaced.cpp in Konqueror in KDE before 4.9.3 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted web page, related to "trying to reuse a frame with a null part." Additional Analyst Notes: - CVE Program Container: References: - https://bugs.kde.org/show_bug.cgi?id=271528 - http://quickgit.kde.org/index.php?p=kdelibs.git&a=commitdiff&h=65464349951e0df9b5d80c2eb3cc7458d54923ae - http://www.nth-dimension.org.uk/pub/NDSA20121010.txt.asc - http://www.openwall.com/lists/oss
9b5d80c2eb3cc7458d54923ae - http://www.nth-dimension.org.uk/pub/NDSA20121010.txt.asc - http://www.openwall.com/lists/oss-security/2012/10/11/11 - http://archives.neohapsis.com/archives/bugtraq/2012-11/0005.html - http://www.openwall.com/lists/oss-security/2012/10/30/6