KDE Sc CVE-2013-4132 NULL Pointer Dereference Denial of Service Vulnerability

Bugtraq ID:	61191
Class:	Design Error
CVE:	CVE-2013-4132
Remote:	Yes
Local:	No
Published:	Jun 26 2013 12:00AM
Updated:	Apr 13 2015 10:01PM
Credit:	mancha
Vulnerable:	KDE Kde Sc 4.10.5 KDE Kde Sc 4.10.4 KDE Kde Sc 4.4.5 KDE Kde Sc 4.4.4 KDE Kde Sc 4.4.3 KDE Kde Sc 4.4.2 KDE Kde Sc 4.3.5 KDE Kde Sc 4.3.3 KDE Kde Sc 4.3.2 KDE Kde Sc 4.3.1 KDE Kde Sc 4.7.1 KDE Kde Sc 4.6.1 KDE Kde Sc 4.6.0 KDE Kde Sc 4.5.1 KDE Kde Sc 4.3.4
Not Vulnerable:

KDE Sc CVE-2013-4132 NULL Pointer Dereference Denial of Service Vulnerability

KDE Sc is prone to a denial-of-service vulnerability.

Successfully exploiting this issue will allow an attacker to crash the affected application, denying service to legitimate users.

Versions prior KDE Sc 4.10.5 are vulnerable.

KDE Sc CVE-2013-4132 NULL Pointer Dereference Denial of Service Vulnerability

Attackers can use standard, readily available tools to exploit this issue.

KDE Sc CVE-2013-4132 NULL Pointer Dereference Denial of Service Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

KDE Sc CVE-2013-4132 NULL Pointer Dereference Denial of Service Vulnerability

References:

• [KDE-Workspace]: Possible NULL ptr. deref. in KDM and KCheckPass (mr. mancha)
  
• CVE Request -- kde-workspace 4.10.5 fixing two security flaws (mancha)
  
• KDE Homepage (KDE)
  
• KDE SC 4.10.5 Info Page (KDE)
  
• Re: CVE Request -- kde-workspace 4.10.5 fixing two security flaws (SecLists.Org)