Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2014-3756

Опубликовано: 16 нояб. 2014
Источник: nvd
CVSS2: 5
EPSS Низкий

Описание

The client in Mumble 1.2.x before 1.2.6 allows remote attackers to force the loading of an external file and cause a denial of service (hang and resource consumption) via a crafted string that is treated as rich-text by a Qt widget, as demonstrated by the (1) user or (2) channel name in a Qt dialog, (3) subject common name or (4) email address to the Certificate Wizard, or (5) server name in a tooltip.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:mumble:mumble:1.2.0:*:*:*:*:*:*:*
cpe:2.3:a:mumble:mumble:1.2.1:*:*:*:*:*:*:*
cpe:2.3:a:mumble:mumble:1.2.2:*:*:*:*:*:*:*
cpe:2.3:a:mumble:mumble:1.2.3:*:*:*:*:*:*:*
cpe:2.3:a:mumble:mumble:1.2.3:rc1:*:*:*:*:*:*
cpe:2.3:a:mumble:mumble:1.2.3:rc2:*:*:*:*:*:*
cpe:2.3:a:mumble:mumble:1.2.3:rc3:*:*:*:*:*:*
cpe:2.3:a:mumble:mumble:1.2.4:*:*:*:*:*:*:*
cpe:2.3:a:mumble:mumble:1.2.4:beta1:*:*:*:*:*:*
cpe:2.3:a:mumble:mumble:1.2.4:rc1:*:*:*:*:*:*
cpe:2.3:a:mumble:mumble:1.2.5:*:*:*:*:*:*:*

EPSS

Процентиль: 69%
0.006
Низкий

5 Medium

CVSS2

Дефекты

CWE-19

Связанные уязвимости

ubuntu
около 11 лет назад

The client in Mumble 1.2.x before 1.2.6 allows remote attackers to force the loading of an external file and cause a denial of service (hang and resource consumption) via a crafted string that is treated as rich-text by a Qt widget, as demonstrated by the (1) user or (2) channel name in a Qt dialog, (3) subject common name or (4) email address to the Certificate Wizard, or (5) server name in a tooltip.

debian
около 11 лет назад

The client in Mumble 1.2.x before 1.2.6 allows remote attackers to for ...

github
больше 3 лет назад

The client in Mumble 1.2.x before 1.2.6 allows remote attackers to force the loading of an external file and cause a denial of service (hang and resource consumption) via a crafted string that is treated as rich-text by a Qt widget, as demonstrated by the (1) user or (2) channel name in a Qt dialog, (3) subject common name or (4) email address to the Certificate Wizard, or (5) server name in a tooltip.

EPSS

Процентиль: 69%
0.006
Низкий

5 Medium

CVSS2

Дефекты

CWE-19