CVE
- Id
- 64496
- CVE No.
- CVE-2013-4549
- Status
- Candidate
- Description
- QXmlSimpleReader in Qt before 5.2 allows context-dependent attackers to cause a denial of service (memory consumption) via an XML Entity Expansion (XEE) attack.
- Phase
- Assigned (20130612)
- Votes
- None (candidate not yet proposed)
- Comments
Related CVE References
Id | CVE Id | CVE No. | Reference | Actions |
---|---|---|---|---|
635707 | 64496 | CVE-2013-4549 | MLIST:[qt-announce] 20131205 [Announce] Qt Project Security Advisory: XML Entity Expansion Denial of Service | View |
635708 | 64496 | CVE-2013-4549 | URL:http://lists.qt-project.org/pipermail/announce/2013-December/000036.html | View |
635709 | 64496 | CVE-2013-4549 | CONFIRM:https://codereview.qt-project.org/#change,71010 | View |
635710 | 64496 | CVE-2013-4549 | CONFIRM:https://codereview.qt-project.org/#change,71368 | View |
635711 | 64496 | CVE-2013-4549 | CONFIRM:http://blog.qt.digia.com/blog/2014/04/24/qt-4-8-6-released/ | View |
635712 | 64496 | CVE-2013-4549 | FEDORA:FEDORA-2014-5695 | View |
635713 | 64496 | CVE-2013-4549 | URL:http://lists.fedoraproject.org/pipermail/package-announce/2014-May/132395.html | View |
635714 | 64496 | CVE-2013-4549 | SUSE:openSUSE-SU-2014:0067 | View |
635715 | 64496 | CVE-2013-4549 | URL:http://lists.opensuse.org/opensuse-updates/2014-01/msg00044.html | View |
635716 | 64496 | CVE-2013-4549 | SUSE:openSUSE-SU-2014:0070 | View |
635717 | 64496 | CVE-2013-4549 | URL:http://lists.opensuse.org/opensuse-updates/2014-01/msg00047.html | View |
635718 | 64496 | CVE-2013-4549 | SUSE:openSUSE-SU-2014:0125 | View |
635719 | 64496 | CVE-2013-4549 | URL:http://lists.opensuse.org/opensuse-updates/2014-01/msg00085.html | View |
635720 | 64496 | CVE-2013-4549 | SUSE:openSUSE-SU-2014:0173 | View |
635721 | 64496 | CVE-2013-4549 | URL:http://lists.opensuse.org/opensuse-updates/2014-01/msg00104.html | View |
635722 | 64496 | CVE-2013-4549 | SUSE:openSUSE-SU-2014:0176 | View |
635723 | 64496 | CVE-2013-4549 | URL:http://lists.opensuse.org/opensuse-updates/2014-01/msg00106.html | View |
635724 | 64496 | CVE-2013-4549 | UBUNTU:USN-2057-1 | View |
635725 | 64496 | CVE-2013-4549 | URL:http://www.ubuntu.com/usn/USN-2057-1 | View |
635726 | 64496 | CVE-2013-4549 | SECUNIA:56008 | View |
635727 | 64496 | CVE-2013-4549 | URL:http://secunia.com/advisories/56008 | View |
635728 | 64496 | CVE-2013-4549 | SECUNIA:56166 | View |
Related JVN
Id | JVN No. | Title | Summary | CVE No. | CVE Id | CVSS_v2 | CVSS_v3 | JVN URL | Actions |
---|---|---|---|---|---|---|---|---|---|
24144 | JVNDB-2013-005719 | Xen における権限を取得される脆弱性 | Xen は、hypercall へのアクセスを適切に制限しないため、権限を取得される脆弱性が存在します。 | CVE-2013-4554 | 64496 | 5.2 | http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-005719.html | View |