The XMLHttpRequest object in Qt before 4.8.4 enables http redirection to the file scheme, which allows man-in-the-middle attackers to force the read of arbitrary local files and possibly obtain sensitive information via a file: URL to a QML application.

libqt4 received a fix for a security issue :

  - avoid redirect to file url scheme in XMLHttpRequests     (bnc#793194, CVE-2012-5624)

libqt4 received security fixes for :

  - XMLHttpRequest could redirect to a file: URL     (CVE-2012-5624, bnc#793194)

  - Disable SSL compression by default to mitigate CRIME     attack (CVE-2012-4929)

Richard J. Moore and Peter Hartmann discovered that Qt allowed redirecting requests from http to file schemes. If an attacker were able to perform a man-in-the-middle attack, this flaw could be exploited to view sensitive information. This issue only affected Ubuntu 11.10, Ubuntu 12.04 LTS, and Ubuntu 12.10. (CVE-2012-5624)

Stephen Cheng discovered that Qt may report incorrect errors when ssl certificate verification fails. (CVE-2012-6093)

Tim Brown and Mark Lowe discovered that Qt incorrectly used weak permissions on shared memory segments. A local attacker could use this issue to view sensitive information, or modify program data belonging to other users. (CVE-2013-0254).

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

New bugfix release, see also:
http://blog.qt.digia.com/blog/2012/11/29/qt-4-8-4-released/

This release also includes a security fix for: QML XmlHttpRequest Insecure Redirection http://lists.qt-project.org/pipermail/announce/2012-November/000014.ht ml

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Severity
74891	openSUSE Security Update : libqt4 (openSUSE-SU-2013:0154-1)	Nessus	SuSE Local Security Checks	medium
74885	openSUSE Security Update : libqt4 (openSUSE-SU-2013:0157-1)	Nessus	SuSE Local Security Checks	medium
64638	Ubuntu 10.04 LTS / 11.10 / 12.04 LTS / 12.10 : qt4-x11 vulnerabilities (USN-1723-1)	Nessus	Ubuntu Local Security Checks	medium
63327	Fedora 16 : qt-4.8.4-1.fc16 (2012-19715)	Nessus	Fedora Local Security Checks	medium
63254	Fedora 17 : qt-4.8.4-1.fc17 (2012-19759)	Nessus	Fedora Local Security Checks	medium
63214	Fedora 18 : qt-4.8.4-1.fc18 (2012-19673)	Nessus	Fedora Local Security Checks	medium

Detections

Analytics

CVE-2012-5624

high

Tenable Plugins

medium

medium

medium

medium

medium

medium