// For flags

CVE-2011-3194

qt buffer overflow in greyscale images

Severity Score

9.3
*CVSS v2

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

0
*Multiple Sources

Exploited in Wild

-
*KEV

Decision

-
*SSVC
Descriptions

Buffer overflow in the TIFF reader in gui/image/qtiffhandler.cpp in Qt 4.7.4 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via the TIFFTAG_SAMPLESPERPIXEL tag in a greyscale TIFF image with multiple samples per pixel.

Desbordamiento de buffer en el lector de TIFF de gui/image/qtiffhandler.cpp de Qt 4.7.4 permite a atacantes remotos provocar una denegación de servicio (caída) y posiblemente ejecutar código arbitrario a través de la etiqueta TIFFTAG_SAMPLESPERPIXEL de una imagen en escala de grises TIFF con múltiples muestras por pixel.

*Credits: N/A
CVSS Scores
Attack Vector
Network
Attack Complexity
Medium
Authentication
None
Confidentiality
Complete
Integrity
Complete
Availability
Complete
Attack Vector
Network
Attack Complexity
High
Authentication
None
Confidentiality
Partial
Integrity
Partial
Availability
Partial
* Common Vulnerability Scoring System
SSVC
  • Decision:-
Exploitation
-
Automatable
-
Tech. Impact
-
* Organization's Worst-case Scenario
Timeline
  • 2011-08-19 CVE Reserved
  • 2011-09-22 CVE Published
  • 2024-05-12 EPSS Updated
  • 2024-08-06 CVE Updated
  • ---------- Exploited in Wild
  • ---------- KEV Due Date
  • ---------- First Exploit
CWE
  • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer
CAPEC
References (24)
URL Tag Source
http://www.openwall.com/lists/oss-security/2011/08/22/6 Mailing List
http://www.openwall.com/lists/oss-security/2011/08/24/8 Mailing List
http://www.osvdb.org/75653 Vdb Entry
http://www.securityfocus.com/bid/49724 Vdb Entry
https://bugzilla.novell.com/show_bug.cgi?id=637275 X_refsource_misc
https://exchange.xforce.ibmcloud.com/vulnerabilities/69975 Vdb Entry
https://qt.gitorious.org/qt/qt/commit/cb6380beb81ab9571c547270c144988781fed465 X_refsource_confirm
URL Date SRC
URL Date SRC
URL Date SRC
http://lists.fedoraproject.org/pipermail/package-announce/2011-September/066209.html 2021-06-16
http://lists.opensuse.org/opensuse-updates/2011-10/msg00007.html 2021-06-16
http://lists.opensuse.org/opensuse-updates/2011-10/msg00008.html 2021-06-16
http://rhn.redhat.com/errata/RHSA-2011-1323.html 2021-06-16
http://rhn.redhat.com/errata/RHSA-2011-1328.html 2021-06-16
http://secunia.com/advisories/46128 2021-06-16
http://secunia.com/advisories/46140 2021-06-16
http://secunia.com/advisories/46187 2021-06-16
http://secunia.com/advisories/46371 2021-06-16
http://secunia.com/advisories/46410 2021-06-16
http://secunia.com/advisories/49383 2021-06-16
http://secunia.com/advisories/49895 2021-06-16
http://security.gentoo.org/glsa/glsa-201206-02.xml 2021-06-16
http://www.ubuntu.com/usn/USN-1504-1 2021-06-16
https://hermes.opensuse.org/messages/12056605 2021-06-16
https://access.redhat.com/security/cve/CVE-2011-3194 2011-09-21
https://bugzilla.redhat.com/show_bug.cgi?id=733119 2011-09-21
Affected Vendors, Products, and Versions
Vendor Product Version Other Status
Vendor Product Version Other Status <-- --> Vendor Product Version Other Status
Qt
Search vendor "Qt"
 Qt
Search vendor "Qt" for product "Qt"
 4.7.4
Search vendor "Qt" for product "Qt" and version "4.7.4"
-
Affected