CVE-2011-3922

Related Files

Red Hat Security Advisory 2012-0880-04

Posted Jun 20, 2012

Authored by Red Hat | Site access.redhat.com

Red Hat Security Advisory 2012-0880-04 - Qt is a software toolkit that simplifies the task of writing and maintaining GUI applications for the X Window System. HarfBuzz is an OpenType text shaping engine. A buffer overflow flaw was found in the harfbuzz module in Qt. If a user loaded a specially-crafted font file with an application linked against Qt, it could cause the application to crash or, possibly, execute arbitrary code with the privileges of the user running the application. A flaw was found in the way Qt handled X.509 certificates with IP address wildcards. An attacker able to obtain a certificate with a Common Name containing an IP wildcard could possibly use this flaw to impersonate an SSL server to client applications that are using Qt. This update also introduces more strict handling for hostname wildcard certificates by disallowing the wildcard character to match more than one hostname component.

tags | advisory, overflow, arbitrary

systems | linux, redhat

advisories | CVE-2010-5076, CVE-2011-3922

SHA-256 | 88fdefaee5d521cf6eb6d97528778445e48f16725d34e7207c5a2cb76e6cb77b

Download | Favorite | View

Gentoo Linux Security Advisory 201201-03

Posted Jan 9, 2012

Authored by Gentoo | Site security.gentoo.org

Gentoo Linux Security Advisory 201201-3 - Multiple vulnerabilities have been reported in Chromium and V8, some of which may allow execution of arbitrary code. Versions less than 16.0.912.75 are affected.

tags | advisory, arbitrary, vulnerability

systems | linux, gentoo

advisories | CVE-2011-3903, CVE-2011-3904, CVE-2011-3906, CVE-2011-3907, CVE-2011-3908, CVE-2011-3909, CVE-2011-3910, CVE-2011-3912, CVE-2011-3913, CVE-2011-3914, CVE-2011-3917, CVE-2011-3921, CVE-2011-3922

SHA-256 | b0886c59913a1ce7f8669e0fd481d47aa19f0e8b93818fc6ef3a35df2499d55c

Download | Favorite | View