CVE-2011-3194

Publication date 15 June 2012

Last updated 24 July 2024

Buffer overflow in the TIFF reader in gui/image/qtiffhandler.cpp in Qt 4.7.4 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via the TIFFTAG_SAMPLESPERPIXEL tag in a greyscale TIFF image with multiple samples per pixel.

Read the notes from the security team

Status

Show unmaintained releases

No maintained releases are affected by this CVE.

Package	Ubuntu Release	Status
qt4-x11	12.04 LTS precise	Not affected
	11.10 oneiric	Not affected
	11.04 natty	Fixed 4:4.7.2-0ubuntu6.4
	10.10 maverick	Ignored end of life
	10.04 LTS lucid	Fixed 4:4.6.2-0ubuntu5.4
	8.04 LTS hardy	Ignored end of life

Notes

jdstrand

pt1 seems to be Windows-only, but pt2 is not, so we should apply both

Patch details

For informational purposes only. We recommend not to cherry-pick updates. How can I get the fixes?

Package	Patch details
qt4-x11	Other: cb6380b Other: c9d2445 Other: a6e3710

References

Related Ubuntu Security Notices (USN)