CVE-2016-10040 Stack-based buffer overflow in QXmlSimpleReader in Qt 4.8.5 allows remote attackers to cause a denial of service (application crash) via a xml file with multiple nested open tags.
MediumCVSS 5.5
EPSS 1.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Stack-based buffer overflow in QXmlSimpleReader in Qt 4.8.5 allows remote attackers to cause a denial of service (application crash) via a xml file with multiple nested open tags.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/qtbase-opensource-src(Debian:12) | < 5.2.0+dfsg-7 | 5.2.0+dfsg-7 |
| debian/qtbase-opensource-src(Debian:13) | < 5.2.0+dfsg-7 | 5.2.0+dfsg-7 |
| debian/qtbase-opensource-src(Debian:14) | < 5.2.0+dfsg-7 | 5.2.0+dfsg-7 |
| qt qxmlsimplereader | = 4.8.5 | No fix listed |
References
- Debian Security Tracker CVE-2016-10040 vendor-advisory
- [oss-security] 20161224 Re: Qt QXmlSimpleReader mailing-list third-party-advisory
- [oss-security] 20170114 Re: [Security] Qt QXmlSimpleReader mailing-list third-party-advisory
- 95113 third-party-advisory vdb-entry
- bugzilla.redhat.com exploit issue-tracking patch third-party-advisory vdb-entry