« Volver al listado

CVE-2014-3755

Estado: ModificadaMedia (5)—

The QSvg module in Qt, as used in the Mumble client 1.2.x before 1.2.6, allows remote attackers to cause a denial of service (hang and resource consumption) via a local file reference in an (1) image tag or (2) XML stylesheet in an SVG file.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Mumble — Mumble

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2014-3755",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 5,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
          "authentication": "NONE",
          "integrityImpact": "NONE",
          "accessComplexity": "LOW",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "NONE"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2014-11-16T11:59:02.853",
  "references": [
    {
      "url": "http://mumble.info/security/Mumble-SA-2014-005.txt",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.openwall.com/lists/oss-security/2014/05/15/1",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.openwall.com/lists/oss-security/2014/05/15/4",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/bid/67400",
      "source": "cve@mitre.org"
    },
    {
      "url": "https://qt.gitorious.org/qt/mumble-developers-qt/commit/2147fa767980fe27a14f018b1528dbf880b96814",
      "tags": [
        "Exploit"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://mumble.info/security/Mumble-SA-2014-005.txt",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.openwall.com/lists/oss-security/2014/05/15/1",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.openwall.com/lists/oss-security/2014/05/15/4",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/67400",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://qt.gitorious.org/qt/mumble-developers-qt/commit/2147fa767980fe27a14f018b1528dbf880b96814",
      "tags": [
        "Exploit"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-399"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "The QSvg module in Qt, as used in the Mumble client 1.2.x before 1.2.6, allows remote attackers to cause a denial of service (hang and resource consumption) via a local file reference in an (1) image tag or (2) XML stylesheet in an SVG file."
    },
    {
      "lang": "es",
      "value": "El modulo QSvg en Qt, usado en Mumble client 1.2.x anterior a 1.2.6, permite a atacantes remotos causar una denegación de servicio (cuelgue y el consumo de recursos)a través de la referencia de un archivo local en (1) una etiqueta de imagen o (2)en una hoja de estilos XML dentro de un archivo SVG."
    }
  ],
  "lastModified": "2026-06-17T00:08:50.510",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:mumble:mumble:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "AC850AD0-C5D7-411F-85EC-7D8586D53828",
              "versionEndIncluding": "1.2.5"
            },
            {
              "criteria": "cpe:2.3:a:mumble:mumble:1.2.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "980EAE3E-CB6A-4859-BA0E-BD59F3C0CB7A"
            },
            {
              "criteria": "cpe:2.3:a:mumble:mumble:1.2.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "97FA20D9-BD99-4B11-97B5-A37B8FBFC3AD"
            },
            {
              "criteria": "cpe:2.3:a:mumble:mumble:1.2.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D3836E7A-B841-477D-9740-070C995722B4"
            },
            {
              "criteria": "cpe:2.3:a:mumble:mumble:1.2.3:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "F5668D3D-66DC-48E5-B2A5-B419ED0921D3"
            },
            {
              "criteria": "cpe:2.3:a:mumble:mumble:1.2.3:rc1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "0DCF3E24-3114-4C9E-BA64-72F10E2825FF"
            },
            {
              "criteria": "cpe:2.3:a:mumble:mumble:1.2.3:rc2:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B4179BE7-916D-4235-957F-67266B986D28"
            },
            {
              "criteria": "cpe:2.3:a:mumble:mumble:1.2.3:rc3:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "720F26B9-457E-49D0-9CA4-0F9F2EA21CD5"
            },
            {
              "criteria": "cpe:2.3:a:mumble:mumble:1.2.4:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A0141BB8-B42D-49BD-88AE-FD8A8F229600"
            },
            {
              "criteria": "cpe:2.3:a:mumble:mumble:1.2.4:beta1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E2279EAF-18B7-401F-A2A8-ED7DC85A2E8B"
            },
            {
              "criteria": "cpe:2.3:a:mumble:mumble:1.2.4:rc1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "745438C8-081F-45FD-B5D6-CF2FE8C48314"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}