CVE-2016-10040

MEDIO 5.5CVE-2016-10040 · Published 07/03/2017 · updated 17/06/2026

In breve

CVE-2016-10040 è una vulnerabilità MEDIO (CVSS 5.5) che riguarda qxmlsimplereader (qt).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 1.9%, superiore al 79.9% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
qxmlsimplereader qt	`= 4.8.5`	No fix yet

Description

Stack-based buffer overflow in QXmlSimpleReader in Qt 4.8.5 allows remote attackers to cause a denial of service (application crash) via a xml file with multiple nested open tags.

References

openwall.com/lists/oss-security/2016/12/24/2 · Mailing List
openwall.com/lists/oss-security/2017/01/14/4 · Mailing List
securityfocus.com/bid/95113 · Third Party Advisory
bugzilla.redhat.com/show_bug.cgi · Exploit

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free