9.3 High
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
0.048 Low
EPSS
Percentile
92.7%
Package : qt4-x11
Version : 4:4.6.3-4+squeeze2
CVE ID : CVE-2011-3193 CVE-2011-3194
CVE-2011-3193
Check for buffer overflow in Lookup_MarkMarkPos that may cause crash
in this function with certain fonts.
CVE-2011-3194
Fix tiff reader to handle TIFFTAG_SAMPLESPERPIXEL for grayscale
images. The reader uses QImage::Format_Indexed8, but since the samples
per pixel value this should be (non-existent) QImage::Format_Indexed16,
causing memory corruption. The fix falls back to the "normal" way of
reading tiff images.
OS | Version | Architecture | Package | Version | Filename |
---|---|---|---|---|---|
Debian | 6 | all | libqt4-network | < 4:4.6.3-4+squeeze2 | libqt4-network_4:4.6.3-4+squeeze2_all.deb |
Debian | 6 | all | libqt4-assistant | < 4:4.6.3-4+squeeze2 | libqt4-assistant_4:4.6.3-4+squeeze2_all.deb |
Debian | 6 | all | qt4-qtconfig | < 4:4.6.3-4+squeeze2 | qt4-qtconfig_4:4.6.3-4+squeeze2_all.deb |
Debian | 6 | all | libqt4-opengl-dev | < 4:4.6.3-4+squeeze2 | libqt4-opengl-dev_4:4.6.3-4+squeeze2_all.deb |
Debian | 6 | all | libqt4-phonon | < 4:4.6.3-4+squeeze2 | libqt4-phonon_4:4.6.3-4+squeeze2_all.deb |
Debian | 6 | all | libqt4-script | < 4:4.6.3-4+squeeze2 | libqt4-script_4:4.6.3-4+squeeze2_all.deb |
Debian | 6 | all | libqt4-svg | < 4:4.6.3-4+squeeze2 | libqt4-svg_4:4.6.3-4+squeeze2_all.deb |
Debian | 6 | all | qt4-x11 | < 4:4.6.3-4+squeeze2 | qt4-x11_4:4.6.3-4+squeeze2_all.deb |
Debian | 6 | all | libqtcore4 | < 4:4.6.3-4+squeeze2 | libqtcore4_4:4.6.3-4+squeeze2_all.deb |
Debian | 6 | all | libqt4-dbus | < 4:4.6.3-4+squeeze2 | libqt4-dbus_4:4.6.3-4+squeeze2_all.deb |