CVE-2011-3194

2012-06-1500:00:00

ubuntu.com

0.049 Low

EPSS

Percentile

92.8%

JSON

Buffer overflow in the TIFF reader in gui/image/qtiffhandler.cpp in Qt
4.7.4 allows remote attackers to cause a denial of service (crash) and
possibly execute arbitrary code via the TIFFTAG_SAMPLESPERPIXEL tag in a
greyscale TIFF image with multiple samples per pixel.

Bugs

<https://bugreports.qt-project.org/browse/QTBUG-19878 (pt1)>
<https://bugreports.qt-project.org/browse/QTBUG-20167 (pt2)>
<https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2011-3194>

Notes

Author	Note
jdstrand	pt1 seems to be Windows-only, but pt2 is not, so we should apply both

OSVersionArchitecturePackageVersionFilename
ubuntu10.04noarchqt4-x11< 4:4.6.2-0ubuntu5.4UNKNOWN
ubuntu11.04noarchqt4-x11< 4:4.7.2-0ubuntu6.4UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	10.04	noarch	qt4-x11	< 4:4.6.2-0ubuntu5.4	UNKNOWN
ubuntu	11.04	noarch	qt4-x11	< 4:4.7.2-0ubuntu6.4	UNKNOWN

References

www.openwall.com/lists/oss-security/2011/08/24/8

launchpad.net/bugs/cve/CVE-2011-3194

nvd.nist.gov/vuln/detail/CVE-2011-3194

security-tracker.debian.org/tracker/CVE-2011-3194

ubuntu.com/security/notices/USN-1504-1

CVE-2011-3194

Bugs

Notes

References

Related