PT-2017-7316 · Qt+2 · Qt5-Qtwebkit+2

Vasyl Kaigorodov · Published 2014-12-18 · Updated 2021-08-31 · CVE-2015-8079

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions qt5-qtwebkit versions prior to 5.4

Description The issue concerns the recording of private browsing URLs in the favicon database, WebpageIcons.db. This affects the privacy of users' browsing history.

Recommendations For qt5-qtwebkit versions prior to 5.4, consider clearing the WebpageIcons.db database to remove recorded private browsing URLs. As a temporary workaround, restrict access to the favicon database to minimize the risk of exploitation.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

ALT-PU-2014-2467

CVE-2015-8079

SUSE-SU-2016:2397-1

SUSE-SU-2016_2397-1

Affected Products

Alt Linux

Suse

Qt5-Qtwebkit

References · 22

• https://osv.dev/vulnerability/SUSE-SU-2016:2397-1 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8079 · Security Note
• https://errata.altlinux.org/ALT-PU-2014-2467 · Vendor Advisory
• https://ubuntu.com/security/CVE-2015-8079 · Vendor Advisory
• https://codereview.qt-project.org/#/c/108936 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2015-8079 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2015-8079 · Security Note
• https://cve.org/CVERecord?id=CVE-2015-8079 · Security Note
• http://lists.suse.com/mailman/listinfo/sle-security-updates · Note
• http://trac.webkit.org/changeset/181565 · Note
• https://suse.com/security/cve/CVE-2016-6354 · Note
• https://lists.suse.com/pipermail/sle-security-updates/2016-September/002293.html · Note
• https://packages.altlinux.org/ru/vuln/CVE-2015-8079 · Note
• http://openwall.com/lists/oss-security/2015/11/05/4 · Note
• https://suse.com/security/cve/CVE-2015-8079 · Note