First published: Sun Nov 16 2014(Updated: )
The QSvg module in Qt, as used in the Mumble client 1.2.x before 1.2.6, allows remote attackers to cause a denial of service (hang and resource consumption) via a local file reference in an (1) image tag or (2) XML stylesheet in an SVG file.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Mumble Mumble | <=1.2.5 | |
Mumble Mumble | =1.2.0 | |
Mumble Mumble | =1.2.1 | |
Mumble Mumble | =1.2.2 | |
Mumble Mumble | =1.2.3 | |
Mumble Mumble | =1.2.3-rc1 | |
Mumble Mumble | =1.2.3-rc2 | |
Mumble Mumble | =1.2.3-rc3 | |
Mumble Mumble | =1.2.4 | |
Mumble Mumble | =1.2.4-beta1 | |
Mumble Mumble | =1.2.4-rc1 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.