Wind River Support Network

HomeDefectsLIN5-13482
Fixed

LIN5-13482 : Security Advisory - qt - CVE-2013-0254

Created: Feb 16, 2013    Updated: Dec 19, 2017
Resolved Date: Jul 9, 2014
Previous ID: LIN3-22430
Found In Version: 5.0
Fix Version: 5.0.1.17
Severity: Low
Applicable for: Wind River Linux 5
Component/s: Userspace

Description

The QSharedMemory class in Qt 5.0.0, 4.8.x before 4.8.5, 4.7.x before 4.7.6, and other versions including 4.4.0 uses weak permissions (world-readable and world-writable) for shared memory segments, which allows local users to read sensitive information or modify critical program data, as demonstrated by reading a pixmap being sent to an X server.

http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2013-0254

Workaround

Unknown

Steps to Reproduce

Unknown

Other Downloads


Live chat
Online