Unrated severityNVD Advisory· Published Feb 24, 2013· Updated Apr 29, 2026
CVE-2012-5624
CVE-2012-5624
Description
The XMLHttpRequest object in Qt before 4.8.4 enables http redirection to the file scheme, which allows man-in-the-middle attackers to force the read of arbitrary local files and possibly obtain sensitive information via a file: URL to a QML application.
Affected products
64cpe:2.3:a:qt:qt:1.41:*:*:*:*:*:*:*+ 58 more
- cpe:2.3:a:qt:qt:1.41:*:*:*:*:*:*:*
- cpe:2.3:a:qt:qt:1.42:*:*:*:*:*:*:*
- cpe:2.3:a:qt:qt:1.43:*:*:*:*:*:*:*
- cpe:2.3:a:qt:qt:1.44:*:*:*:*:*:*:*
- cpe:2.3:a:qt:qt:1.45:*:*:*:*:*:*:*
- cpe:2.3:a:qt:qt:2.0.0:*:*:*:*:*:*:*
- cpe:2.3:a:qt:qt:2.0.1:*:*:*:*:*:*:*
- cpe:2.3:a:qt:qt:2.0.2:*:*:*:*:*:*:*
- cpe:2.3:a:qt:qt:3.3.0:*:*:*:*:*:*:*
- cpe:2.3:a:qt:qt:3.3.1:*:*:*:*:*:*:*
- cpe:2.3:a:qt:qt:3.3.2:*:*:*:*:*:*:*
- cpe:2.3:a:qt:qt:3.3.3:*:*:*:*:*:*:*
- cpe:2.3:a:qt:qt:3.3.4:*:*:*:*:*:*:*
- cpe:2.3:a:qt:qt:3.3.5:*:*:*:*:*:*:*
- cpe:2.3:a:qt:qt:3.3.6:*:*:*:*:*:*:*
- cpe:2.3:a:qt:qt:4.0.0:*:*:*:*:*:*:*
- cpe:2.3:a:qt:qt:4.0.1:*:*:*:*:*:*:*
- cpe:2.3:a:qt:qt:4.1.0:*:*:*:*:*:*:*
- cpe:2.3:a:qt:qt:4.1.1:*:*:*:*:*:*:*
- cpe:2.3:a:qt:qt:4.1.2:*:*:*:*:*:*:*
- cpe:2.3:a:qt:qt:4.1.3:*:*:*:*:*:*:*
- cpe:2.3:a:qt:qt:4.1.4:*:*:*:*:*:*:*
- cpe:2.3:a:qt:qt:4.1.5:*:*:*:*:*:*:*
- cpe:2.3:a:qt:qt:4.2.0:*:*:*:*:*:*:*
- cpe:2.3:a:qt:qt:4.2.1:*:*:*:*:*:*:*
- cpe:2.3:a:qt:qt:4.2.3:*:*:*:*:*:*:*
- cpe:2.3:a:qt:qt:4.3.0:*:*:*:*:*:*:*
- cpe:2.3:a:qt:qt:4.3.1:*:*:*:*:*:*:*
- cpe:2.3:a:qt:qt:4.3.2:*:*:*:*:*:*:*
- cpe:2.3:a:qt:qt:4.3.3:*:*:*:*:*:*:*
- cpe:2.3:a:qt:qt:4.3.4:*:*:*:*:*:*:*
- cpe:2.3:a:qt:qt:4.3.5:*:*:*:*:*:*:*
- cpe:2.3:a:qt:qt:4.4.0:*:*:*:*:*:*:*
- cpe:2.3:a:qt:qt:4.4.1:*:*:*:*:*:*:*
- cpe:2.3:a:qt:qt:4.4.2:*:*:*:*:*:*:*
- cpe:2.3:a:qt:qt:4.4.3:*:*:*:*:*:*:*
- cpe:2.3:a:qt:qt:4.5.0:*:*:*:*:*:*:*
- cpe:2.3:a:qt:qt:4.5.1:*:*:*:*:*:*:*
- cpe:2.3:a:qt:qt:4.5.2:*:*:*:*:*:*:*
- cpe:2.3:a:qt:qt:4.5.3:*:*:*:*:*:*:*
- cpe:2.3:a:qt:qt:4.6.0:*:*:*:*:*:*:*
- cpe:2.3:a:qt:qt:4.6.0:rc1:*:*:*:*:*:*
- cpe:2.3:a:qt:qt:4.6.1:*:*:*:*:*:*:*
- cpe:2.3:a:qt:qt:4.6.2:*:*:*:*:*:*:*
- cpe:2.3:a:qt:qt:4.6.3:*:*:*:*:*:*:*
- cpe:2.3:a:qt:qt:4.6.4:*:*:*:*:*:*:*
- cpe:2.3:a:qt:qt:4.6.5:*:*:*:*:*:*:*
- cpe:2.3:a:qt:qt:4.6.5:rc:*:*:*:*:*:*
- cpe:2.3:a:qt:qt:4.7.0:*:*:*:*:*:*:*
- cpe:2.3:a:qt:qt:4.7.1:*:*:*:*:*:*:*
- cpe:2.3:a:qt:qt:4.7.2:*:*:*:*:*:*:*
- cpe:2.3:a:qt:qt:4.7.3:*:*:*:*:*:*:*
- cpe:2.3:a:qt:qt:4.7.4:*:*:*:*:*:*:*
- cpe:2.3:a:qt:qt:4.7.5:*:*:*:*:*:*:*
- cpe:2.3:a:qt:qt:4.7.6:*:*:*:*:*:*:*
- cpe:2.3:a:qt:qt:4.7.6:rc:*:*:*:*:*:*
- cpe:2.3:a:qt:qt:4.8.0:*:*:*:*:*:*:*
- cpe:2.3:a:qt:qt:4.8.1:*:*:*:*:*:*:*
- cpe:2.3:a:qt:qt:4.8.2:*:*:*:*:*:*:*
cpe:2.3:o:canonical:ubuntu_linux:10.04:-:lts:*:*:*:*:*+ 3 more
- cpe:2.3:o:canonical:ubuntu_linux:10.04:-:lts:*:*:*:*:*
- cpe:2.3:o:canonical:ubuntu_linux:11.10:*:*:*:*:*:*:*
- cpe:2.3:o:canonical:ubuntu_linux:12.04:-:lts:*:*:*:*:*
- cpe:2.3:o:canonical:ubuntu_linux:12.10:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
10- secunia.com/advisories/52217nvdVendor Advisory
- lists.opensuse.org/opensuse-updates/2013-01/msg00034.htmlnvd
- lists.opensuse.org/opensuse-updates/2013-01/msg00045.htmlnvd
- lists.opensuse.org/opensuse-updates/2013-01/msg00048.htmlnvd
- lists.qt-project.org/pipermail/announce/2012-November/000014.htmlnvd
- qt.gitorious.org/qt/qt/commit/96311def2466dd44de64d77a1c815b22fbf68f71nvd
- www.openwall.com/lists/oss-security/2012/12/04/8nvd
- www.ubuntu.com/usn/USN-1723-1nvd
- bugzilla.redhat.com/show_bug.cginvd
- codereview.qt-project.orgnvd
News mentions
0No linked articles in our index yet.