CVE-2014-3755

Exploit

EPSS 1.12%
Veröffentlicht 16.11.2014 11:59:02
Zuletzt bearbeitet 12.04.2025 10:46:40
Quelle cve@mitre.org
Teams Watchlist Login
Unerledigt Login

The QSvg module in Qt, as used in the Mumble client 1.2.x before 1.2.6, allows remote attackers to cause a denial of service (hang and resource consumption) via a local file reference in an (1) image tag or (2) XML stylesheet in an SVG file.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 8

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Mumble ≫ Mumble Version <= 1.2.5

Mumble ≫ Mumble Version1.2.0

Mumble ≫ Mumble Version1.2.1

Mumble ≫ Mumble Version1.2.2

Mumble ≫ Mumble Version1.2.3

Mumble ≫ Mumble Version1.2.3 Updaterc1

Mumble ≫ Mumble Version1.2.3 Updaterc2

Mumble ≫ Mumble Version1.2.3 Updaterc3

Mumble ≫ Mumble Version1.2.4

Mumble ≫ Mumble Version1.2.4 Updatebeta1

Mumble ≫ Mumble Version1.2.4 Updaterc1

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	1.12%	0.776

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	5	10	2.9	AV:N/AC:L/Au:N/C:N/I:N/A:P

http://mumble.info/security/Mumble-SA-2014-005.txt

Vendor Advisory

http://www.openwall.com/lists/oss-security/2014/05/15/1

http://www.openwall.com/lists/oss-security/2014/05/15/4

http://www.securityfocus.com/bid/67400

https://qt.gitorious.org/qt/mumble-developers-qt/commit/2147fa767980fe27a14f018b1528dbf880b96814

Exploit

https://nvd.nist.gov/vuln/detail/CVE-2014-3755

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2014-3755

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2014-3755

EUVD