← Back

CVE-2013-0254

nvd nist
Published: Feb 6, 2013Modified: Apr 29, 2026

JSON object

Loading...
3.6
Vector
AV:L/AC:L/Au:N/C:P/I:P/A:N
Exploitability: 3.9 / Impact: 4.9
Source: NVD

Description

The QSharedMemory class in Qt 5.0.0, 4.8.x before 4.8.5, 4.7.x before 4.7.6, and other versions including 4.4.0 uses weak permissions (world-readable and world-writable) for shared memory segments, which allows local users to read sensitive information or modify critical program data, as demonstrated by reading a pixmap being sent to an X server.

Affected (61)

Products: Qt: Qt
1 product
Qt
Configuration A
5 vulnerable
Vulnerable SoftwareAffected Versions
Qt
Version 1.41
Version 1.42
Version 1.43
Version 1.44
Version 1.45
Configuration B
3 vulnerable
Vulnerable SoftwareAffected Versions
Qt
Version 2.0.0
Version 2.0.1
Version 2.0.2
Configuration C
7 vulnerable
Vulnerable SoftwareAffected Versions
Qt
Version 3.3.0
Version 3.3.1
Version 3.3.2
Version 3.3.3
Version 3.3.4
Version 3.3.5
Version 3.3.6
Configuration D
8 vulnerable
Vulnerable SoftwareAffected Versions
Qt
Version 4.0.0
Version 4.0.1
Version 4.1.0
Version 4.1.1
Version 4.1.2
Version 4.1.3
Version 4.1.4
Version 4.1.5
Configuration E
3 vulnerable
Vulnerable SoftwareAffected Versions
Qt
Version 4.2.0
Version 4.2.1
Version 4.2.3
Configuration F
6 vulnerable
Vulnerable SoftwareAffected Versions
Qt
Version 4.3.0
Version 4.3.1
Version 4.3.2
Version 4.3.3
Version 4.3.4
Version 4.3.5
Configuration G
4 vulnerable
Vulnerable SoftwareAffected Versions
Qt
Version 4.4.0
Version 4.4.1
Version 4.4.2
Version 4.4.3
Configuration H
4 vulnerable
Vulnerable SoftwareAffected Versions
Qt
Version 4.5.0
Version 4.5.1
Version 4.5.2
Version 4.5.3
Configuration I
6 vulnerable
Vulnerable SoftwareAffected Versions
Qt
Version 4.6.0
Version 4.6.1
Version 4.6.2
Version 4.6.3
Version 4.6.4
Version 4.6.5
Configuration J
7 vulnerable
Vulnerable SoftwareAffected Versions
Qt
Version 4.7.0
Version 4.7.1
Version 4.7.2
Version 4.7.3
Version 4.7.4
Version 4.7.5
Version 4.7.6
Configuration K
6 vulnerable
Vulnerable SoftwareAffected Versions
Qt
Version 4.8.0
Version 4.8.1
Version 4.8.2
Version 4.8.3
Version 4.8.4
Version 4.8.5
Configuration L
2 vulnerable
Vulnerable SoftwareAffected Versions
Qt
Version 5.0.0
Version 5.0.1

Related CWEs

Timeline

No history available yet.