5
CVSSv2

CVE-2014-3755

Published: 16/11/2014 Updated: 17/11/2014
CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10
VMScore: 445
Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P

Vulnerability Summary

The QSvg module in Qt, as used in the Mumble client 1.2.x prior to 1.2.6, allows remote malicious users to cause a denial of service (hang and resource consumption) via a local file reference in an (1) image tag or (2) XML stylesheet in an SVG file.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

mumble mumble 1.2.3

mumble mumble 1.2.4

mumble mumble 1.2.0

mumble mumble 1.2.1

mumble mumble 1.2.2

mumble mumble

Vendor Advisories

Debian Bug report logs - #748189 mumble: CVE-2014-3755 CVE-2014-3756 Package: src:mumble; Maintainer for src:mumble is Christopher Knadle <ChrisKnadle@coredumpus>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Thu, 15 May 2014 06:57:01 UTC Severity: important Tags: fixed-upstream, security, upstream ...