PT-2012-6356 · Qt+4 · Libqtwebkit4-X86+13

Published

1970-01-01

·

Updated

2024-06-15

·

CVE-2011-3922

CVSS v2.0

7.5

High

VectorAV:N/AC:L/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions libqt4-x11 versions prior to the fixed version libqt4-qt3support versions prior to the fixed version libqt4-qt3support-32bit versions prior to the fixed version libQtWebKit4 versions prior to the fixed version libqt4-x11-x86 versions prior to the fixed version libqt4-devel versions prior to the fixed version libQtWebKit4-32bit versions prior to the fixed version libqt4-32bit versions prior to the fixed version libqt4 versions prior to the fixed version libQtWebKit4-x86 versions prior to the fixed version Google Chrome versions prior to 16.0.912.75
Description The issue is related to a stack-based buffer overflow that can be exploited remotely, potentially leading to a denial of service or other unspecified impacts. This is particularly relevant to the handling of glyphs in Google Chrome. The vulnerability can compromise the confidentiality, integrity, and availability of protected information.
Recommendations For libqt4-x11, update to a version that includes the fix for this issue. For libqt4-qt3support, update to a version that includes the fix for this issue. For libqt4-qt3support-32bit, update to a version that includes the fix for this issue. For libQtWebKit4, update to a version that includes the fix for this issue. For libqt4-x11-x86, update to a version that includes the fix for this issue. For libqt4-devel, update to a version that includes the fix for this issue. For libQtWebKit4-32bit, update to a version that includes the fix for this issue. For libqt4-32bit, update to a version that includes the fix for this issue. For libqt4, update to a version that includes the fix for this issue. For libQtWebKit4-x86, update to a version that includes the fix for this issue. For Google Chrome, update to version 16.0.912.75 or later.

Exploit

Fix

DoS

Memory Corruption

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-787

Related Identifiers

BDU:2015-04534
BDU:2015-04535
BDU:2015-04536
BDU:2015-04537
BDU:2015-04538
BDU:2015-04539
BDU:2015-04540
BDU:2015-04541
BDU:2015-04542
BDU:2015-04543
BDU:2015-04544
BDU:2015-04545
BDU:2015-04546
BDU:2015-04547
BDU:2015-05394
BDU:2015-05395
BDU:2015-05396
BDU:2015-05397
BDU:2015-05398
BDU:2015-05399
BDU:2015-05400
BDU:2015-05401
BDU:2015-05402
BDU:2015-05403
CESA-2012_0880
CVE-2011-3922
OPENSUSE-SU-2012_0091-1
OPENSUSE-SU-2024:10171-1
OPENSUSE-SU-2024:12948-1
RHSA-2012:0880
RHSA-2012_0880
SUSE-SU-2012_0097-1

Affected Products

Centos
Google Chrome
Red Hat
Suse
Libqtwebkit4
Libqtwebkit4-32Bit
Libqtwebkit4-X86
Libqt4
Libqt4-32Bit
Libqt4-Devel
Libqt4-Qt3Support
Libqt4-Qt3Support-32Bit
Libqt4-X11
Libqt4-X11-X86