CVE-2013-4549

Qt <5.2 - Denial of Service

Title source: llm
STIX 2.1

Description

QXmlSimpleReader in Qt before 5.2 allows context-dependent attackers to cause a denial of service (memory consumption) via an XML Entity Expansion (XEE) attack.

References (13)

Core 13
Core References
Various Sources mailing-list x_refsource_mlist
http://lists.qt-project.org/pipermail/announce/2013-December/000036.html
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/56166
Mailing List vendor-advisory x_refsource_suse
http://lists.opensuse.org/opensuse-updates/2014-01/msg00104.html
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/56008
Mailing List vendor-advisory x_refsource_suse
http://lists.opensuse.org/opensuse-updates/2014-01/msg00085.html
Various Sources x_refsource_confirm
https://codereview.qt-project.org/#change%2C71010
Mailing List vendor-advisory x_refsource_suse
http://lists.opensuse.org/opensuse-updates/2014-01/msg00106.html
Mailing List vendor-advisory x_refsource_suse
http://lists.opensuse.org/opensuse-updates/2014-01/msg00044.html
Vendor Advisory vendor-advisory x_refsource_ubuntu
http://www.ubuntu.com/usn/USN-2057-1
Various Sources x_refsource_confirm
https://codereview.qt-project.org/#change%2C71368
Mailing List vendor-advisory x_refsource_suse
http://lists.opensuse.org/opensuse-updates/2014-01/msg00047.html
Mailing List, Third Party Advisory vendor-advisory x_refsource_fedora
http://lists.fedoraproject.org/pipermail/package-announce/2014-May/132395.html

Scores

EPSS 0.0311
EPSS Percentile 86.2%

Details

CWE
CWE-20
Status published
Products (2)
digia/qt < 5.1.0
qt/qt 5.0.2
Published Dec 23, 2013
Tracked Since Feb 18, 2026