1. Home
  2. CVE Database
  3. CVE-2012-5624
MEDIUM · 4.3

CVE-2012-5624

The XMLHttpRequest object in Qt before 4.8.4 enables http redirection to the file scheme, which allows man-in-the-middle attackers to force the read of arbitrary local files and possibly obtain sensit...

Vulnerability Description

The XMLHttpRequest object in Qt before 4.8.4 enables http redirection to the file scheme, which allows man-in-the-middle attackers to force the read of arbitrary local files and possibly obtain sensitive information via a file: URL to a QML application.

CVSS Score

4.3

MEDIUM

AV:N/AC:M/Au:N/C:P/I:N/A:N
Confidentiality
PARTIAL
Integrity
NONE
Availability
NONE

Affected Products

VendorProductVersions
DigiaQt<= 4.8.3
QtQt1.41
CanonicalUbuntu Linux10.04

Related Weaknesses (CWE)

CWE-200

References

FAQ

What is CVE-2012-5624?

CVE-2012-5624 is a vulnerability with a CVSS score of 4.3 (MEDIUM). The XMLHttpRequest object in Qt before 4.8.4 enables http redirection to the file scheme, which allows man-in-the-middle attackers to force the read of arbitrary local files and possibly obtain sensit...

How severe is CVE-2012-5624?

CVE-2012-5624 has been rated MEDIUM with a CVSS base score of 4.3/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2012-5624?

Check the references section above for vendor advisories and patch information. Affected products include: Digia Qt, Qt Qt, Canonical Ubuntu Linux.