CVE - CVE-2011-3194

CVE-ID
CVE-2011-3194	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
Buffer overflow in the TIFF reader in gui/image/qtiffhandler.cpp in Qt 4.7.4 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via the TIFFTAG_SAMPLESPERPIXEL tag in a greyscale TIFF image with multiple samples per pixel.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:46128 URL:http://secunia.com/advisories/46128 MISC:46140 URL:http://secunia.com/advisories/46140 MISC:46187 URL:http://secunia.com/advisories/46187 MISC:46371 URL:http://secunia.com/advisories/46371 MISC:46410 URL:http://secunia.com/advisories/46410 MISC:49383 URL:http://secunia.com/advisories/49383 MISC:49724 URL:http://www.securityfocus.com/bid/49724 MISC:49895 URL:http://secunia.com/advisories/49895 MISC:75653 URL:~~http://www.osvdb.org/75653~~ (Obsolete source) MISC:FEDORA-2011-12145 URL:http://lists.fedoraproject.org/pipermail/package-announce/2011-September/066209.html MISC:GLSA-201206-02 URL:http://security.gentoo.org/glsa/glsa-201206-02.xml MISC:RHSA-2011:1323 URL:http://rhn.redhat.com/errata/RHSA-2011-1323.html MISC:RHSA-2011:1328 URL:http://rhn.redhat.com/errata/RHSA-2011-1328.html MISC:SUSE-SU-2011:1113 URL:https://hermes.opensuse.org/messages/12056605 MISC:USN-1504-1 URL:http://www.ubuntu.com/usn/USN-1504-1 MISC:[oss-security] 20120822 CVE request: libqt4: two memory issues URL:http://www.openwall.com/lists/oss-security/2011/08/22/6 MISC:[oss-security] 20120824 Re: CVE request: libqt4: two memory issues URL:http://www.openwall.com/lists/oss-security/2011/08/24/8 MISC:https://bugzilla.novell.com/show_bug.cgi?id=637275 URL:https://bugzilla.novell.com/show_bug.cgi?id=637275 MISC:https://qt.gitorious.org/qt/qt/commit/cb6380beb81ab9571c547270c144988781fed465 URL:https://qt.gitorious.org/qt/qt/commit/cb6380beb81ab9571c547270c144988781fed465 MISC:openSUSE-SU-2011:1119 URL:http://lists.opensuse.org/opensuse-updates/2011-10/msg00007.html MISC:openSUSE-SU-2011:1120 URL:http://lists.opensuse.org/opensuse-updates/2011-10/msg00008.html MISC:qt-grayscale-bo(69975) URL:https://exchange.xforce.ibmcloud.com/vulnerabilities/69975
Assigning CNA
Red Hat, Inc.
Date Record Created
20110819	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20110819)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)

Use of the CVE® List and the associated references from this website are subject to the terms of use. CVE is sponsored by the U.S. Department of Homeland Security (DHS) Cybersecurity and Infrastructure Security Agency (CISA). Copyright © 1999–2024, The MITRE Corporation. CVE and the CVE logo are registered trademarks of The MITRE Corporation.