CVE-2017-15011

The named pipes in qtsingleapp in Qt 5.x, as used in qBittorrent and SugarSync, are configured for remote access and allow remote attackers to cause a denial of service (application crash) via an unspecified string.
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:qt:qt:5.0.0:*:*:*:*:*:*:*
cpe:2.3:a:qt:qt:5.0.1:*:*:*:*:*:*:*
cpe:2.3:a:qt:qt:5.1.0:*:*:*:*:*:*:*
cpe:2.3:a:qt:qt:5.2.0:*:*:*:*:*:*:*
cpe:2.3:a:qt:qt:5.3.0:*:*:*:*:*:*:*
cpe:2.3:a:qt:qt:5.4.0:*:*:*:*:*:*:*
cpe:2.3:a:qt:qt:5.5.0:*:*:*:*:*:*:*
cpe:2.3:a:qt:qt:5.6.0:*:*:*:*:*:*:*
cpe:2.3:a:qt:qt:5.7.0:*:*:*:*:*:*:*
cpe:2.3:a:qt:qt:5.8.0:*:*:*:*:*:*:*
cpe:2.3:a:qt:qt:5.9.0:*:*:*:*:*:*:*
cpe:2.3:a:qt:qt:5.10.0:*:*:*:*:*:*:*
cpe:2.3:a:qt:qt:5.10.1:*:*:*:*:*:*:*
cpe:2.3:a:qt:qt:5.11.0:*:*:*:*:*:*:*
cpe:2.3:a:qt:qt:5.11.1:*:*:*:*:*:*:*
cpe:2.3:a:qt:qt:5.11.2:*:*:*:*:*:*:*
cpe:2.3:a:qt:qt:5.11.3:*:*:*:*:*:*:*
cpe:2.3:a:qt:qt:5.12.0:*:*:*:*:*:*:*
cpe:2.3:a:qt:qt:5.12.1:*:*:*:*:*:*:*
cpe:2.3:a:qt:qt:5.12.2:*:*:*:*:*:*:*
cpe:2.3:a:qt:qt:5.12.3:*:*:*:*:*:*:*
cpe:2.3:a:qt:qt:5.12.4:*:*:*:*:*:*:*
cpe:2.3:a:qt:qt:5.13.0:*:*:*:*:*:*:*
cpe:2.3:a:qt:qt:5.14.0:*:*:*:*:*:*:*

History

No history.

Information

Published : 2017-10-04 01:29

Updated : 2024-02-28 16:04


NVD link : CVE-2017-15011

Mitre link : CVE-2017-15011

CVE.ORG link : CVE-2017-15011


JSON object : View

Products Affected

qt

  • qt
CWE
CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer