high7.5
CVE-2017-15011
The named pipes in qtsingleapp in Qt 5.x, as used in qBittorrent and SugarSync, are configured for remote access and allow remote attackers to cause a denial o…
Impact
The named pipes in qtsingleapp in Qt 5.x, as used in qBittorrent and SugarSync, are configured for remote access and allow remote attackers to cause a denial of service (application crash) via an unspecified string.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Qt | Qt | Versions 5.0.0, 5.0.1, 5.1.0, 5.2.0, 5.3.0, 5.4.0 |
Weakness classification
References
- NVD record
- CVE.org record
- https://hackinparis.com/data/slides/2017/2017_Cohen_Gil_The_forgotten_interface_Windows_named_pipes.pdf
- https://www.youtube.com/watch?v=m6zISgWPGGY
- https://hackinparis.com/data/slides/2017/2017_Cohen_Gil_The_forgotten_interface_Windows_named_pipes.pdf
- https://www.youtube.com/watch?v=m6zISgWPGGY