High severity7.5NVD Advisory· Published Oct 4, 2017· Updated May 13, 2026
CVE-2017-15011
CVE-2017-15011
Description
The named pipes in qtsingleapp in Qt 5.x, as used in qBittorrent and SugarSync, are configured for remote access and allow remote attackers to cause a denial of service (application crash) via an unspecified string.
Affected products
24cpe:2.3:a:qt:qt:5.0.0:*:*:*:*:*:*:*+ 23 more
- cpe:2.3:a:qt:qt:5.0.0:*:*:*:*:*:*:*
- cpe:2.3:a:qt:qt:5.0.1:*:*:*:*:*:*:*
- cpe:2.3:a:qt:qt:5.1.0:*:*:*:*:*:*:*
- cpe:2.3:a:qt:qt:5.10.0:*:*:*:*:*:*:*
- cpe:2.3:a:qt:qt:5.10.1:*:*:*:*:*:*:*
- cpe:2.3:a:qt:qt:5.11.0:*:*:*:*:*:*:*
- cpe:2.3:a:qt:qt:5.11.1:*:*:*:*:*:*:*
- cpe:2.3:a:qt:qt:5.11.2:*:*:*:*:*:*:*
- cpe:2.3:a:qt:qt:5.11.3:*:*:*:*:*:*:*
- cpe:2.3:a:qt:qt:5.12.0:*:*:*:*:*:*:*
- cpe:2.3:a:qt:qt:5.12.1:*:*:*:*:*:*:*
- cpe:2.3:a:qt:qt:5.12.2:*:*:*:*:*:*:*
- cpe:2.3:a:qt:qt:5.12.3:*:*:*:*:*:*:*
- cpe:2.3:a:qt:qt:5.12.4:*:*:*:*:*:*:*
- cpe:2.3:a:qt:qt:5.13.0:*:*:*:*:*:*:*
- cpe:2.3:a:qt:qt:5.14.0:*:*:*:*:*:*:*
- cpe:2.3:a:qt:qt:5.2.0:*:*:*:*:*:*:*
- cpe:2.3:a:qt:qt:5.3.0:*:*:*:*:*:*:*
- cpe:2.3:a:qt:qt:5.4.0:*:*:*:*:*:*:*
- cpe:2.3:a:qt:qt:5.5.0:*:*:*:*:*:*:*
- cpe:2.3:a:qt:qt:5.6.0:*:*:*:*:*:*:*
- cpe:2.3:a:qt:qt:5.7.0:*:*:*:*:*:*:*
- cpe:2.3:a:qt:qt:5.8.0:*:*:*:*:*:*:*
- cpe:2.3:a:qt:qt:5.9.0:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
2- hackinparis.com/data/slides/2017/2017_Cohen_Gil_The_forgotten_interface_Windows_named_pipes.pdfnvdThird Party Advisory
- www.youtube.com/watchnvdThird Party Advisory
News mentions
0No linked articles in our index yet.