[ GLSA 201403-04 ] QtCore: Denial of Service

[GLSA]

Gentoo Linux Security Advisory

Title: QtCore: Denial of Service (GLSA 201403-04)
Severity: normal
Exploitable: remote
Date: March 13, 2014
Bug(s): #494728
ID: 201403-04

Synopsis

A vulnerability in QXmlSimpleReader class can be used to cause a
Denial of Service condition.


Background

The Qt toolkit is a comprehensive C++ application development framework.

Affected Packages

Package: dev-qt/qtcore
Vulnerable: < 4.8.5-r1
Unaffected: >= 4.8.5-r1
Architectures: All supported architectures


Description

A vulnerability in QXmlSimpleReader’s XML entity parsing has been
discovered.


Impact

A remote attacker could entice a user to open a specially crafted XML
file using an application linked against QtCore, possibly resulting in
Denial of Service.


Workaround

There is no known workaround at this time.

Resolution

All QtCore users should upgrade to the latest version: