CVE-2012-6093

The CVE-2012-6093 issue affects Qt's QSslSocket::sslErrors across Qt versions (pre-4.6.5; pre-4.7.6 for 4.7.x; pre-4.8.5 for 4.8.x) when used with certain OpenSSL versions. It arises from an incompatible structure layout that can read memory from the wrong location, causing Qt to report an incorr...

CVE-2012-5624

CVE-2012-5624 affects Qt 4.x where the XMLHttpRequest implementation could be redirected from http to the file: URL scheme, enabling a man‑in‑the‑middle attacker to trigger reads of local files in a QML application. The root cause is improper handling of redirects in XMLHttpRequest, allowing acce...

CVE-2012-6093

The QSslSocket::sslErrors function in Qt before 4.6.5, 4.7.x before 4.7.6, 4.8.x before 4.8.5, when using certain versions of openSSL, uses an "incompatible structure layout" that can read memory from the wrong location, which causes Qt to report an incorrect error when certificate validation fai...

PT-2013-1814

Name of the Vulnerable Software and Affected Versions Qt versions prior to 4.8.4 Description The issue allows man-in-the-middle attackers to force the read of arbitrary local files and possibly obtain sensitive information via a file: URL to a QML application. This is due to the XMLHttpRequest...

CVE-2012-6093: Undefined Security Weakness

The QSslSocket::sslErrors function in Qt before 4.6.5, 4.7.x before 4.7.6, 4.8.x before 4.8.5, when using certain versions of openSSL, uses an "incompatible structure layout" that can read memory from the wrong location, which causes Qt to report an incorrect error when certificate validation fai...

CVE-2012-5624: Exposure of Sensitive Information to an Unauthorized Actor

The XMLHttpRequest object in Qt before 4.8.4 enables http redirection to the file scheme, which allows man-in-the-middle attackers to force the read of arbitrary local files and possibly obtain sensitive information via a file: URL to a QML application...

PT-2013-1885 · Openssl +2 · Openssl +2

Name of the Vulnerable Software and Affected Versions: Qt versions prior to 4.6.5 Qt versions 4.7.x prior to 4.7.6 Qt versions 4.8.x prior to 4.8.5 Description: The issue arises from the QSslSocket::sslErrors function, which, when used with certain versions of openSSL, may read memory from an...

Qt multiple security vulnerabilities

Information leakage, incalid SSL error messages...

[USN-1723-1] Qt vulnerabilities

========================================================================== Ubuntu Security Notice USN-1723-1 February 14, 2013 qt4-x11 vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: ...

Fedora Update for qt FEDORA-2013-2041

Check for the Version of qt OpenVAS Vulnerability Test Fedora Update for qt FEDORA-2013-2041 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of the...

Ubuntu Update for qt4-x11 USN-1723-1

Check for the Version of qt4-x11 OpenVAS Vulnerability Test $Id: gbubuntuUSN17231.nasl 7958 2017-12-01 06:47:47Z santu $ Ubuntu Update for qt4-x11 USN-1723-1 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software...

USN-1723-1: Qt vulnerabilities

Richard J. Moore and Peter Hartmann discovered that Qt allowed redirecting requests from http to file schemes. If an attacker were able to perform a machine-in-the-middle attack, this flaw could be exploited to view sensitive information. This issue only affected Ubuntu 11.10, Ubuntu 12.04 LTS, a...

[SECURITY] Fedora 18 Update: qt-4.8.4-11.fc18

Qt is a software toolkit for developing applications. This package contains base tools, like string, xml, and network handling...

CVE-2013-0254

The QSharedMemory class in Qt 5.0.0, 4.8.x before 4.8.5, 4.7.x before 4.7.6, and other versions including 4.4.0 uses weak permissions world-readable and world-writable for shared memory segments, which allows local users to read sensitive information or modify critical program data, as demonstrat...

CVE-2013-0254

Removed by vendor...

CVE-2013-0254

The QSharedMemory class in Qt 5.0.0, 4.8.x before 4.8.5, 4.7.x before 4.7.6, and other versions including 4.4.0 uses weak permissions world-readable and world-writable for shared memory segments, which allows local users to read sensitive information or modify critical program data, as demonstrat...

CVE-2013-0254

The QSharedMemory class in Qt 5.0.0, 4.8.x before 4.8.5, 4.7.x before 4.7.6, and other versions including 4.4.0 uses weak permissions world-readable and world-writable for shared memory segments, which allows local users to read sensitive information or modify critical program data, as demonstrat...

CVE-2013-0254

CVE-2013-0254 affects the Qt QSharedMemory facility: in Qt 5.0.0, 4.8.x before 4.8.5, 4.7.x before 4.7.6, and other versions including 4.4.0, QSharedMemory creates shared memory segments with world-readable/world-writable permissions, enabling local users to read sensitive data or modify critical...

PT-2013-1191

Name of the Vulnerable Software and Affected Versions Qt versions 4.4.0 through 4.7.5 Qt versions 4.8.x before 4.8.5 Qt version 5.0.0 qt-x11 versions affected versions not specified qt-demos-4.6.2 version qt-doc-4.6.2 version qt-examples-4.6.2 version qt-debuginfo-4.6.2 version qt-devel-4.6.2...

CVE-2013-0254

The QSharedMemory class in Qt 5.0.0, 4.8.x before 4.8.5, 4.7.x before 4.7.6, and other versions including 4.4.0 uses weak permissions world-readable and world-writable for shared memory segments, which allows local users to read sensitive information or modify critical program data, as demonstrat...