CVE-2014-3755: Medium severity mumble vulnerability
Published Nov 16, 2014
·Updated
The QSvg module in Qt, as used in the Mumble client 1.2.x before 1.2.6, allows remote attackers to cause a denial of service (hang and resource consumption) via a local file reference in an (1) image tag or (2) XML stylesheet in an SVG file.
Affected Software
11 affected components
Mumble Mumble<=1.2.5
Mumble Mumble=1.2.0
Mumble Mumble=1.2.1
Mumble Mumble=1.2.2
Mumble Mumble=1.2.3
Mumble Mumble=1.2.3-rc1
Mumble Mumble=1.2.3-rc2
Mumble Mumble=1.2.3-rc3
Mumble Mumble=1.2.4
Mumble Mumble=1.2.4-beta1
Mumble Mumble=1.2.4-rc1
Event History
Nov 16, 2014
CVE Published
via MITRE·11:00 AM
Data Sourced
via MITRE·11:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2014-3755?
CVE-2014-3755 has a severity rating that indicates it can cause denial of service through hang and resource consumption.
2
How do I fix CVE-2014-3755?
To fix CVE-2014-3755, upgrade Mumble to version 1.2.6 or later.
3
Who is affected by CVE-2014-3755?
CVE-2014-3755 affects Mumble clients version 1.2.5 and earlier, including specific 1.2.x versions.
4
What type of vulnerability is CVE-2014-3755?
CVE-2014-3755 is classified as a denial of service vulnerability.
5
Can CVE-2014-3755 be exploited remotely?
Yes, CVE-2014-3755 can be exploited remotely through malicious SVG files containing local file references.