Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2012-5624
HistoryOct 03, 2022 - 4:15 p.m.

CVE-2012-5624

2022-10-0316:15:31
CWE-200
[email protected]
web.nvd.nist.gov
28
2
cve-2012-5624
xmlhttprequest object
qt
http redirection
file scheme
man-in-the-middle attack

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

5.8 Medium

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

62.1%

JSON

The XMLHttpRequest object in Qt before 4.8.4 enables http redirection to the file scheme, which allows man-in-the-middle attackers to force the read of arbitrary local files and possibly obtain sensitive information via a file: URL to a QML application.

Affected configurations

NVD
Node
digiaqtRange≤4.8.3
OR
qtqtMatch1.41
OR
qtqtMatch1.42
OR
qtqtMatch1.43
OR
qtqtMatch1.44
OR
qtqtMatch1.45
OR
qtqtMatch2.0.0
OR
qtqtMatch2.0.1
OR
qtqtMatch2.0.2
OR
qtqtMatch3.3.0
OR
qtqtMatch3.3.1
OR
qtqtMatch3.3.2
OR
qtqtMatch3.3.3
OR
qtqtMatch3.3.4
OR
qtqtMatch3.3.5
OR
qtqtMatch3.3.6
OR
qtqtMatch4.0.0
OR
qtqtMatch4.0.1
OR
qtqtMatch4.1.0
OR
qtqtMatch4.1.1
OR
qtqtMatch4.1.2
OR
qtqtMatch4.1.3
OR
qtqtMatch4.1.4
OR
qtqtMatch4.1.5
OR
qtqtMatch4.2.0
OR
qtqtMatch4.2.1
OR
qtqtMatch4.2.3
OR
qtqtMatch4.3.0
OR
qtqtMatch4.3.1
OR
qtqtMatch4.3.2
OR
qtqtMatch4.3.3
OR
qtqtMatch4.3.4
OR
qtqtMatch4.3.5
OR
qtqtMatch4.4.0
OR
qtqtMatch4.4.1
OR
qtqtMatch4.4.2
OR
qtqtMatch4.4.3
OR
qtqtMatch4.5.0
OR
qtqtMatch4.5.1
OR
qtqtMatch4.5.2
OR
qtqtMatch4.5.3
OR
qtqtMatch4.6.0
OR
qtqtMatch4.6.0rc1
OR
qtqtMatch4.6.1
OR
qtqtMatch4.6.2
OR
qtqtMatch4.6.3
OR
qtqtMatch4.6.4
OR
qtqtMatch4.6.5
OR
qtqtMatch4.6.5rc
OR
qtqtMatch4.7.0
OR
qtqtMatch4.7.1
OR
qtqtMatch4.7.2
OR
qtqtMatch4.7.3
OR
qtqtMatch4.7.4
OR
qtqtMatch4.7.5
OR
qtqtMatch4.7.6
OR
qtqtMatch4.7.6rc
OR
qtqtMatch4.8.0
OR
qtqtMatch4.8.1
OR
qtqtMatch4.8.2
Node
canonicalubuntu_linuxMatch10.04-lts
OR
canonicalubuntu_linuxMatch11.10
OR
canonicalubuntu_linuxMatch12.04-lts
OR
canonicalubuntu_linuxMatch12.10

Social References

More

Related

nessus 6
debiancve 1
nvd 1
openvas 6
fedora 3
cvelist 1
ubuntucve 1
prion 1
securityvulns 2
ubuntu 1
nessus
nessus
Fedora 18 : qt-4.8.4-1.fc18 (2012-19673)
2012-12-11 00:00:00
Fedora 16 : qt-4.8.4-1.fc16 (2012-19715)
2012-12-24 00:00:00
openSUSE Security Update : libqt4 (openSUSE-SU-2013:0154-1)
2014-06-13 00:00:00
debiancve
debiancve
CVE-2012-5624
2022-10-03 16:15:31
nvd
nvd
CVE-2012-5624
2013-02-24 19:55:00
openvas
openvas
Fedora Update for qt FEDORA-2012-19759
2012-12-14 00:00:00
Fedora Update for qt FEDORA-2012-19759
2012-12-14 00:00:00
Fedora Update for qt FEDORA-2012-19715
2012-12-26 00:00:00
fedora
fedora
[SECURITY] Fedora 17 Update: qt-4.8.4-1.fc17
2012-12-13 06:01:36
[SECURITY] Fedora 18 Update: qt-4.8.4-1.fc18
2012-12-11 05:54:39
[SECURITY] Fedora 16 Update: qt-4.8.4-1.fc16
2012-12-21 12:04:10
cvelist
cvelist
CVE-2012-5624
2022-10-03 16:15:31
ubuntucve
ubuntucve
CVE-2012-5624
2012-12-05 00:00:00
prion
prion
Design/Logic Flaw
2013-02-24 19:55:00
securityvulns
securityvulns
Qt multiple security vulnerabilities
2013-02-18 00:00:00
[USN-1723-1] Qt vulnerabilities
2013-02-18 00:00:00
ubuntu
ubuntu
Qt vulnerabilities
2013-02-14 00:00:00

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

5.8 Medium

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

62.1%

JSON
Related for CVE-2012-5624
nessus6debiancve1nvd1openvas6fedora3cvelist1ubuntucve1prion1securityvulns2ubuntu1