Bug 640370 (CVE-2010-3374)

Summary:	CVE-2010-3374 Qt Creator: Insecure library loading vulnerability
Product:	[Other] Security Response	Reporter:	Jan Lieskovsky <jlieskov>
Component:	vulnerability	Assignee:	Red Hat Product Security <security-response-team>
Status:	CLOSED ERRATA	QA Contact:
Severity:	low	Docs Contact:
Priority:	low
Version:	unspecified	CC:	itamar, jrusnack, ltinkl, rdieter
Target Milestone:	---	Keywords:	Security
Target Release:	---
Hardware:	All
OS:	Linux
Whiteboard:
Fixed In Version:		Doc Type:	Bug Fix
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2014-09-23 14:10:14 UTC	Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:	640372
Bug Blocks:

Description Jan Lieskovsky 2010-10-05 16:40:46 UTC

Common Vulnerabilities and Exposures assigned an identifier CVE-2010-3374 to
the following vulnerability:

Qt Creator before 2.0.1 places a zero-length directory name in the
LD_LIBRARY_PATH, which allows local users to gain privileges via a
Trojan horse shared library in the current working directory.

References:
[1] http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3374
[2] http://qt.nokia.com/about/news/security-announcement-qt-creator-2.0.0-for-desktop-platforms
[3] http://www.qt.gitorious.org/qt-creator/qt-creator/commit/3c00715c8e90c57953ec4a8716110f6954e524e4
[4] http://www.mandriva.com/security/advisories?name=MDVSA-2010:193
[5] http://www.securityfocus.com/bid/43672
[6] http://www.vupen.com/english/advisories/2010/2559
[7] http://www.vupen.com/english/advisories/2010/2560

Comment 1 Jan Lieskovsky 2010-10-05 16:42:54 UTC

This issue affects the versions of the qt-creator package, as shipped
with Fedora release of 12 and 13.

Please fix.

Comment 2 Jan Lieskovsky 2010-10-05 16:45:38 UTC

Created qt-creator tracking bugs for this issue

Affects: fedora-all [bug 640372]

Comment 3 Rex Dieter 2014-09-23 14:10:14 UTC

the dependent bug(s) are fixed.