3.6

CVE-2013-0254

The QSharedMemory class in Qt 5.0.0, 4.8.x before 4.8.5, 4.7.x before 4.7.6, and other versions including 4.4.0 uses weak permissions (world-readable and world-writable) for shared memory segments, which allows local users to read sensitive information or modify critical program data, as demonstrated by reading a pixmap being sent to an X server.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Qt ≫ Qt Version 1.41
Qt ≫ Qt Version 1.42
Qt ≫ Qt Version 1.43
Qt ≫ Qt Version 1.44
Qt ≫ Qt Version 1.45
Qt ≫ Qt Version 2.0.0
Qt ≫ Qt Version 2.0.1
Qt ≫ Qt Version 2.0.2
Qt ≫ Qt Version 3.3.0
Qt ≫ Qt Version 3.3.1
Qt ≫ Qt Version 3.3.2
Qt ≫ Qt Version 3.3.3
Qt ≫ Qt Version 3.3.4
Qt ≫ Qt Version 3.3.5
Qt ≫ Qt Version 3.3.6
Qt ≫ Qt Version 4.0.0
Qt ≫ Qt Version 4.0.1
Qt ≫ Qt Version 4.1.0
Qt ≫ Qt Version 4.1.1
Qt ≫ Qt Version 4.1.2
Qt ≫ Qt Version 4.1.3
Qt ≫ Qt Version 4.1.4
Qt ≫ Qt Version 4.1.5
Qt ≫ Qt Version 4.2.0
Qt ≫ Qt Version 4.2.1
Qt ≫ Qt Version 4.2.3
Qt ≫ Qt Version 4.3.0
Qt ≫ Qt Version 4.3.1
Qt ≫ Qt Version 4.3.2
Qt ≫ Qt Version 4.3.3
Qt ≫ Qt Version 4.3.4
Qt ≫ Qt Version 4.3.5
Qt ≫ Qt Version 4.4.0
Qt ≫ Qt Version 4.4.1
Qt ≫ Qt Version 4.4.2
Qt ≫ Qt Version 4.4.3
Qt ≫ Qt Version 4.5.0
Qt ≫ Qt Version 4.5.1
Qt ≫ Qt Version 4.5.2
Qt ≫ Qt Version 4.5.3
Qt ≫ Qt Version 4.6.0
Qt ≫ Qt Version 4.6.1
Qt ≫ Qt Version 4.6.2
Qt ≫ Qt Version 4.6.3
Qt ≫ Qt Version 4.6.4
Qt ≫ Qt Version 4.6.5
Qt ≫ Qt Version 4.7.0
Qt ≫ Qt Version 4.7.1
Qt ≫ Qt Version 4.7.2
Qt ≫ Qt Version 4.7.3
Qt ≫ Qt Version 4.7.4
Qt ≫ Qt Version 4.7.5
Qt ≫ Qt Version 4.7.6
Qt ≫ Qt Version 4.8.0
Qt ≫ Qt Version 4.8.1
Qt ≫ Qt Version 4.8.2
Qt ≫ Qt Version 4.8.3
Qt ≫ Qt Version 4.8.4
Qt ≫ Qt Version 4.8.5
Qt ≫ Qt Version 5.0.0
Qt ≫ Qt Version 5.0.1
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.42% 0.336
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 3.6 3.9 4.9
AV:L/AC:L/Au:N/C:P/I:P/A:N
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://lists.opensuse.org/opensuse-updates/2013-03/msg00014.html
http://lists.opensuse.org/opensuse-updates/2013-03/msg00015.html
http://lists.opensuse.org/opensuse-updates/2013-03/msg00019.html
http://lists.qt-project.org/pipermail/announce/2013-February/000023.html
Patch
Vendor Advisory
http://rhn.redhat.com/errata/RHSA-2013-0669.html
https://bugzilla.redhat.com/show_bug.cgi?id=907425