9.3 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
9 High
AI Score
Confidence
High
0.049 Low
EPSS
Percentile
92.8%
Package : qt4-x11
Version : 4:4.6.3-4+squeeze2
CVE ID : CVE-2011-3193 CVE-2011-3194
CVE-2011-3193
Check for buffer overflow in Lookup_MarkMarkPos that may cause crash
in this function with certain fonts.
CVE-2011-3194
Fix tiff reader to handle TIFFTAG_SAMPLESPERPIXEL for grayscale
images. The reader uses QImage::Format_Indexed8, but since the samples
per pixel value this should be (non-existent) QImage::Format_Indexed16,
causing memory corruption. The fix falls back to the "normal" way of
reading tiff images.
OS | Version | Architecture | Package | Version | Filename |
---|---|---|---|---|---|
Debian | 6 | amd64 | qt4-dev-tools | < 4:4.6.3-4+squeeze2 | qt4-dev-tools_4:4.6.3-4+squeeze2_amd64.deb |
Debian | 6 | amd64 | libqt4-dev | < 4:4.6.3-4+squeeze2 | libqt4-dev_4:4.6.3-4+squeeze2_amd64.deb |
Debian | 6 | amd64 | libqt4-webkit | < 4:4.6.3-4+squeeze2 | libqt4-webkit_4:4.6.3-4+squeeze2_amd64.deb |
Debian | 6 | all | qt4-x11 | < 4:4.6.3-4+squeeze2 | qt4-x11_4:4.6.3-4+squeeze2_all.deb |
Debian | 6 | amd64 | libqt4-opengl-dev | < 4:4.6.3-4+squeeze2 | libqt4-opengl-dev_4:4.6.3-4+squeeze2_amd64.deb |
Debian | 6 | i386 | libqtgui4 | < 4:4.6.3-4+squeeze2 | libqtgui4_4:4.6.3-4+squeeze2_i386.deb |
Debian | 6 | amd64 | libqt4-scripttools | < 4:4.6.3-4+squeeze2 | libqt4-scripttools_4:4.6.3-4+squeeze2_amd64.deb |
Debian | 6 | i386 | libqt4-sql-ibase | < 4:4.6.3-4+squeeze2 | libqt4-sql-ibase_4:4.6.3-4+squeeze2_i386.deb |
Debian | 6 | amd64 | libqt4-sql-sqlite2 | < 4:4.6.3-4+squeeze2 | libqt4-sql-sqlite2_4:4.6.3-4+squeeze2_amd64.deb |
Debian | 6 | amd64 | libqt4-webkit-dbg | < 4:4.6.3-4+squeeze2 | libqt4-webkit-dbg_4:4.6.3-4+squeeze2_amd64.deb |