Lucene search

K
osvGoogleOSV:DLA-117-1
HistoryDec 21, 2014 - 12:00 a.m.

qt4-x11 - security update

2014-12-2100:00:00
Google
osv.dev
9

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.046 Low

EPSS

Percentile

91.3%

  • CVE-2011-3193
    Check for buffer overflow in Lookup_MarkMarkPos that may cause crash
    in this function with certain fonts.
  • CVE-2011-3194
    Fix tiff reader to handle TIFFTAG_SAMPLESPERPIXEL for grayscale
    images. The reader uses QImage::Format_Indexed8, but since the samples
    per pixel value this should be (non-existent) QImage::Format_Indexed16,
    causing memory corruption. The fix falls back to the normal way of
    reading tiff images.

For Debian 6 Squeeze, these issues have been fixed in qt4-x11 version 4:4.6.3-4+squeeze2

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.046 Low

EPSS

Percentile

91.3%