CVE-2017-18238

An issue was discovered in Exempi before 2.4.4. The TradQTManager::ParseCachedBoxes function in XMPFiles/source/FormatSupport/QuickTimeSupport.cpp allows remote attackers to cause a denial of service infinite loop via crafted XMP data in a .qt file...

CVE-2017-18238

CVE-2017-18238 affects Exempi (before 2.4.4). The issue lies in TradQT_Manager::ParseCachedBoxes in XMPFiles/source/FormatSupport/QuickTime_Support.cpp, which allows remote attackers to trigger a denial of service (infinite loop) via crafted XMP data in a .qt file. This vulnerability is documente...

CVE-2017-18238

An issue was discovered in Exempi before 2.4.4. The TradQTManager::ParseCachedBoxes function in XMPFiles/source/FormatSupport/QuickTimeSupport.cpp allows remote attackers to cause a denial of service infinite loop via crafted XMP data in a .qt file...

Code injection

Libavcodec in FFmpeg before 0.11 allows remote attackers to execute arbitrary code via a crafted QT file...

CVE-2012-5360

Libavcodec in FFmpeg before 0.11 allows remote attackers to execute arbitrary code via a crafted QT file...

CVE-2012-5360

Libavcodec in FFmpeg before 0.11 allows remote attackers to execute arbitrary code via a crafted QT file...

CVE-2012-5360

Libavcodec in FFmpeg before 0.11 allows remote attackers to execute arbitrary code via a crafted QT file...

DEBIAN-CVE-2012-5360

Libavcodec in FFmpeg before 0.11 allows remote attackers to execute arbitrary code via a crafted QT file...

CVE-2012-5360

CVE-2012-5360 affects Libavcodec in FFmpeg prior to 0.11. The vulnerability allows remote code execution through a crafted QT file due to a memory/parse issue in libavcodec. Impact is remote code execution with high severity over network; requires no privileges but user interaction is not require...

CVE-2012-5360

Libavcodec in FFmpeg before 0.11 allows remote attackers to execute arbitrary code via a crafted QT file...

CVE-2012-5360

Libavcodec in FFmpeg before 0.11 allows remote attackers to execute arbitrary code via a crafted QT file...

CVE-2012-5360

Libavcodec in FFmpeg before 0.11 allows remote attackers to execute arbitrary code via a crafted QT file...

CVE-2012-5360: Improper Input Validation

Libavcodec in FFmpeg before 0.11 allows remote attackers to execute arbitrary code via a crafted QT file...

Google Chrome V8 Engine and Digia Qt QtWebEngineCore Denial of Service Vulnerability

Google Chrome is a web browser developed by Google Google.V8 is a set of open source JavaScript engine.Digia Qt is a cross-platform C++ application development framework from Digia Finland. The framework can be used to develop GUI programs. QtWebEngineCore is one of the Web engine core. A denial ...

UBUNTU-CVE-2015-1290

The Google V8 engine, as used in Google Chrome before 44.0.2403.89 and QtWebEngineCore in Qt before 5.5.1, allows remote attackers to cause a denial of service memory corruption or execute arbitrary code via a crafted web site...

[SECURITY] Fedora 26 Update: qt5-qtbase-5.9.2-6.fc26

Qt is a software toolkit for developing applications. This package contains base tools, like string, xml, and network handling...

CVE-2017-10905

A vulnerability in applications created using Qt for Android prior to 5.9.3 allows attackers to alter environment variables via unspecified vectors...

CVE-2017-10904

Qt for Android prior to 5.9.0 allows remote attackers to execute arbitrary OS commands via unspecified vectors...

CVE-2017-10905

A vulnerability in applications created using Qt for Android prior to 5.9.3 allows attackers to alter environment variables via unspecified vectors...

CVE-2017-10904

Qt for Android prior to 5.9.0 allows remote attackers to execute arbitrary OS commands via unspecified vectors...