SecuritySpace - CVE-2014-3756

Vulnerability Search		Search 324607 CVE descriptions and 145615 test descriptions, access 10,000+ cross references.
	Tests CVE All

CVE ID: CVE-2014-3756

Description: The client in Mumble 1.2.x before 1.2.6 allows remote attackers to force the loading of an external file and cause a denial of service (hang and resource consumption) via a crafted string that is treated as rich-text by a Qt widget, as demonstrated by the (1) user or (2) channel name in a Qt dialog, (3) subject common name or (4) email address to the Certificate Wizard, or (5) server name in a tooltip.

Test IDs: None available

Cross References: Common Vulnerability Exposure (CVE) ID: CVE-2014-3756
BugTraq ID: 67401
http://www.securityfocus.com/bid/67401
http://www.openwall.com/lists/oss-security/2014/05/15/4
http://www.openwall.com/lists/oss-security/2014/05/15/1

CVE ID:	CVE-2014-3756
Description:	The client in Mumble 1.2.x before 1.2.6 allows remote attackers to force the loading of an external file and cause a denial of service (hang and resource consumption) via a crafted string that is treated as rich-text by a Qt widget, as demonstrated by the (1) user or (2) channel name in a Qt dialog, (3) subject common name or (4) email address to the Certificate Wizard, or (5) server name in a tooltip.
Test IDs:	None available
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2014-3756 BugTraq ID: 67401 http://www.securityfocus.com/bid/67401 http://www.openwall.com/lists/oss-security/2014/05/15/4 http://www.openwall.com/lists/oss-security/2014/05/15/1