Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2014-3755

Опубликовано: 16 нояб. 2014
Источник: nvd
CVSS2: 5
EPSS Низкий

Описание

The QSvg module in Qt, as used in the Mumble client 1.2.x before 1.2.6, allows remote attackers to cause a denial of service (hang and resource consumption) via a local file reference in an (1) image tag or (2) XML stylesheet in an SVG file.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:mumble:mumble:*:*:*:*:*:*:*:*
Версия до 1.2.5 (включая)
cpe:2.3:a:mumble:mumble:1.2.0:*:*:*:*:*:*:*
cpe:2.3:a:mumble:mumble:1.2.1:*:*:*:*:*:*:*
cpe:2.3:a:mumble:mumble:1.2.2:*:*:*:*:*:*:*
cpe:2.3:a:mumble:mumble:1.2.3:*:*:*:*:*:*:*
cpe:2.3:a:mumble:mumble:1.2.3:rc1:*:*:*:*:*:*
cpe:2.3:a:mumble:mumble:1.2.3:rc2:*:*:*:*:*:*
cpe:2.3:a:mumble:mumble:1.2.3:rc3:*:*:*:*:*:*
cpe:2.3:a:mumble:mumble:1.2.4:*:*:*:*:*:*:*
cpe:2.3:a:mumble:mumble:1.2.4:beta1:*:*:*:*:*:*
cpe:2.3:a:mumble:mumble:1.2.4:rc1:*:*:*:*:*:*

EPSS

Процентиль: 78%
0.0112
Низкий

5 Medium

CVSS2

Дефекты

CWE-399

Связанные уязвимости

ubuntu
около 11 лет назад

The QSvg module in Qt, as used in the Mumble client 1.2.x before 1.2.6, allows remote attackers to cause a denial of service (hang and resource consumption) via a local file reference in an (1) image tag or (2) XML stylesheet in an SVG file.

debian
около 11 лет назад

The QSvg module in Qt, as used in the Mumble client 1.2.x before 1.2.6 ...

github
больше 3 лет назад

The QSvg module in Qt, as used in the Mumble client 1.2.x before 1.2.6, allows remote attackers to cause a denial of service (hang and resource consumption) via a local file reference in an (1) image tag or (2) XML stylesheet in an SVG file.

EPSS

Процентиль: 78%
0.0112
Низкий

5 Medium

CVSS2

Дефекты

CWE-399