CVE-2011-3194

Severity: critical (CVSS 9.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 6.9% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2012-06-16 · updated 2026-06-16
Weakness: CWE-119

Description

Buffer overflow in the TIFF reader in gui/image/qtiffhandler.cpp in Qt 4.7.4 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via the TIFFTAG_SAMPLESPERPIXEL tag in a greyscale TIFF image with multiple samples per pixel.

Affected products

Qt: 4.7.4

References

http://lists.fedoraproject.org/pipermail/package-announce/2011-September/066209.html
http://lists.opensuse.org/opensuse-updates/2011-10/msg00007.html
http://lists.opensuse.org/opensuse-updates/2011-10/msg00008.html
http://rhn.redhat.com/errata/RHSA-2011-1323.html
http://rhn.redhat.com/errata/RHSA-2011-1328.html
http://secunia.com/advisories/46128
http://secunia.com/advisories/46140
http://secunia.com/advisories/46187
http://secunia.com/advisories/46371
http://secunia.com/advisories/46410
http://secunia.com/advisories/49383
http://secunia.com/advisories/49895

Get alerted when CVE-2011-3194 or the next vulnerability affects your stack