Access Restriction Bypass The advisory has been revoked - it doesn't affect any version of package qt4-x11  (opens in a new tab)


Threat Intelligence

EPSS
0.52% (78th percentile)

Do your applications use this vulnerable package?

In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.

Test your applications
  • Snyk IDSNYK-UBUNTU1410-QT4X11-662436
  • published10 Sept 2020
  • disclosed26 Nov 2010

Introduced: 26 Nov 2010

CVE-2010-3829  (opens in a new tab)
CWE-264  (opens in a new tab)

Amendment

The Ubuntu security team deemed this advisory irrelevant for Ubuntu:14.10.

NVD Description

Note: Versions mentioned in the description apply only to the upstream qt4-x11 package and not the qt4-x11 package as distributed by Ubuntu.

WebKit in Apple iOS before 4.2 allows remote attackers to bypass the remote image loading setting in Mail via an HTML LINK element with a DNS prefetching property, as demonstrated by an HTML e-mail message that uses a LINK element for X-Confirm-Reading-To functionality, a related issue to CVE-2010-3813.