Lucene search

K
ubuntucveUbuntu.comUB:CVE-2012-5624
HistoryDec 05, 2012 - 12:00 a.m.

CVE-2012-5624

2012-12-0500:00:00
ubuntu.com
ubuntu.com
8

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

0.002 Low

EPSS

Percentile

62.1%

The XMLHttpRequest object in Qt before 4.8.4 enables http redirection to
the file scheme, which allows man-in-the-middle attackers to force the read
of arbitrary local files and possibly obtain sensitive information via a
file: URL to a QML application.

Bugs

OSVersionArchitecturePackageVersionFilename
ubuntu11.10noarchqt4-x11< 4:4.7.4-0ubuntu8.3UNKNOWN
ubuntu12.04noarchqt4-x11< 4:4.8.1-0ubuntu4.4UNKNOWN
ubuntu12.10noarchqt4-x11< 4:4.8.3+dfsg-0ubuntu3.1UNKNOWN

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

0.002 Low

EPSS

Percentile

62.1%