« List of all CVEs

CVE-2013-0254

Published: 2/6/2013 Last updated: 8/6/2024 Reserved: 12/6/2012

The QSharedMemory class in Qt 5.0.0, 4.8.x before 4.8.5, 4.7.x before 4.7.6, and other versions including 4.4.0 uses weak permissions (world-readable and world-writable) for shared memory segments, which allows local users to read sensitive information or modify critical program data, as demonstrated by reading a pixmap being sent to an X server.

CNA assigner: redhat (53f830b8-0a3f-465b-8143-3b8a9948e749) Requested by: n/a

Opam packages affected (2)

conf-qt oqamldebug

Products affected (0)

No product listed.

References (12)