CVE-2011-3194

Published: Jun 16, 2012Modified: Apr 29, 2026

9.3

Vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Exploitability: 8.6 / Impact: 10.0

Source: NVD

Description

Buffer overflow in the TIFF reader in gui/image/qtiffhandler.cpp in Qt 4.7.4 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via the TIFFTAG_SAMPLESPERPIXEL tag in a greyscale TIFF image with multiple samples per pixel.

Affected (1)

Products: Qt: Qt

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Qt Qt	Version 4.7.4

Related CWEs

Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

References (44)

http://lists.fedoraproject.org/pipermail/package-announce/2011-September/066209.html

Source: secalert@redhat.com

http://lists.opensuse.org/opensuse-updates/2011-10/msg00007.html

Source: secalert@redhat.com

http://lists.opensuse.org/opensuse-updates/2011-10/msg00008.html

Source: secalert@redhat.com

http://rhn.redhat.com/errata/RHSA-2011-1323.html

Source: secalert@redhat.com

http://rhn.redhat.com/errata/RHSA-2011-1328.html

Source: secalert@redhat.com

http://secunia.com/advisories/46128

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/46140

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/46187

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/46371

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/46410

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/49383

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/49895

Source: secalert@redhat.com

Vendor Advisory

http://security.gentoo.org/glsa/glsa-201206-02.xml

Source: secalert@redhat.com

http://www.openwall.com/lists/oss-security/2011/08/22/6

Source: secalert@redhat.com

http://www.openwall.com/lists/oss-security/2011/08/24/8

Source: secalert@redhat.com

http://www.osvdb.org/75653

Source: secalert@redhat.com

http://www.securityfocus.com/bid/49724

Source: secalert@redhat.com

http://www.ubuntu.com/usn/USN-1504-1

Source: secalert@redhat.com

https://bugzilla.novell.com/show_bug.cgi?id=637275

Source: secalert@redhat.com

https://exchange.xforce.ibmcloud.com/vulnerabilities/69975

Source: secalert@redhat.com

https://hermes.opensuse.org/messages/12056605

Source: secalert@redhat.com

https://qt.gitorious.org/qt/qt/commit/cb6380beb81ab9571c547270c144988781fed465

Source: secalert@redhat.com

http://lists.fedoraproject.org/pipermail/package-announce/2011-September/066209.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-updates/2011-10/msg00007.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-updates/2011-10/msg00008.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://rhn.redhat.com/errata/RHSA-2011-1323.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://rhn.redhat.com/errata/RHSA-2011-1328.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/46128

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://secunia.com/advisories/46140

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://secunia.com/advisories/46187

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://secunia.com/advisories/46371

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://secunia.com/advisories/46410

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://secunia.com/advisories/49383

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://secunia.com/advisories/49895

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://security.gentoo.org/glsa/glsa-201206-02.xml

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.openwall.com/lists/oss-security/2011/08/22/6

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.openwall.com/lists/oss-security/2011/08/24/8

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.osvdb.org/75653

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/49724

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.ubuntu.com/usn/USN-1504-1

Source: af854a3a-2127-422b-91ae-364da2661108

https://bugzilla.novell.com/show_bug.cgi?id=637275

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/69975

Source: af854a3a-2127-422b-91ae-364da2661108

https://hermes.opensuse.org/messages/12056605

Source: af854a3a-2127-422b-91ae-364da2661108

https://qt.gitorious.org/qt/qt/commit/cb6380beb81ab9571c547270c144988781fed465

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.