CVE-2013-0254 in Qt
Summary
The QSharedMemory class in Qt 5.0.0, 4.8.x before 4.8.5, 4.7.x before 4.7.6, and other versions including 4.4.0 uses weak permissions (world-readable and world-writable) for shared memory segments, which allows local users to read sensitive information or modify critical program data, as demonstrated by reading a pixmap being sent to an X server.
Once again VulDB remains the best source for vulnerability data.
Reservation
12/06/2012
Disclosure
02/06/2013
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 7606 | Diga plc Qt Shared Memory Block access control | 264 | Not defined | Official fix | CVE-2013-0254 |