NVD

Id
36609  
Name
CVE-2013-0254  
Description
The QSharedMemory class in Qt 5.0.0, 4.8.x before 4.8.5, 4.7.x before 4.7.6, and other versions including 4.4.0 uses weak permissions (world-readable and world-writable) for shared memory segments, which allows local users to read sensitive information or modify critical program data, as demonstrated by reading a pixmap being sent to an X server.  
Reject
 
CVSS Version
2  
CVSS Score
3.6  
Severity
Low  
CVSS Base Score
3.6  
CVSS Impact Subscore
4.9  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:P/I:P/A:N)  
Pub Date
2017-01-18  
Published
2013-02-06  
Modified Date
2013-05-14  
Seq
2013-0254  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
187066 36609 CVE-2013-0254 openSUSE-SU-2013:0403  View
187067 36609 CVE-2013-0254 openSUSE-SU-2013:0404  View
187068 36609 CVE-2013-0254 openSUSE-SU-2013:0411  View
187069 36609 CVE-2013-0254 [qt-announce] 20130205 [Announce] [CVE-2013-0254] Qt Project Security Advisory: System V shared memory segments created world-writeable  View
187070 36609 CVE-2013-0254 RHSA-2013:0669  View
187071 36609 CVE-2013-0254 https://bugzilla.redhat.com/show_bug.cgi?id=907425  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
19866 JVNDB-2013-001441 Qt の QSharedMemory クラスにおける重要な情報を読まれる脆弱性 Qt の QSharedMemory クラスは、共有メモリセグメント用の脆弱なパーミッション (world-readable および world-writable) を使用するため、重要な情報を読まれる、またはプログラムデータを変更される脆弱性が存在します。 CVE-2013-0254 60196 CVE-2013-0254 36609 3.6 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-001441.html 2013-02-06 2013-05-20 View