{"id":"CVE-2013-4549","details":"QXmlSimpleReader in Qt before 5.2 allows context-dependent attackers to cause a denial of service (memory consumption) via an XML Entity Expansion (XEE) attack.","modified":"2026-04-16T06:17:34.660445767Z","published":"2013-12-23T22:55:02Z","related":["openSUSE-SU-2024:10180-1","openSUSE-SU-2024:10287-1"],"references":[{"type":"ADVISORY","url":"http://secunia.com/advisories/56008"},{"type":"ADVISORY","url":"http://secunia.com/advisories/56166"},{"type":"ADVISORY","url":"http://www.ubuntu.com/usn/USN-2057-1"},{"type":"ARTICLE","url":"http://blog.qt.digia.com/blog/2014/04/24/qt-4-8-6-released/"},{"type":"WEB","url":"http://lists.fedoraproject.org/pipermail/package-announce/2014-May/132395.html"},{"type":"WEB","url":"http://lists.opensuse.org/opensuse-updates/2014-01/msg00044.html"},{"type":"WEB","url":"http://lists.opensuse.org/opensuse-updates/2014-01/msg00047.html"},{"type":"WEB","url":"http://lists.opensuse.org/opensuse-updates/2014-01/msg00085.html"},{"type":"WEB","url":"http://lists.opensuse.org/opensuse-updates/2014-01/msg00104.html"},{"type":"WEB","url":"http://lists.opensuse.org/opensuse-updates/2014-01/msg00106.html"},{"type":"WEB","url":"http://lists.qt-project.org/pipermail/announce/2013-December/000036.html"},{"type":"WEB","url":"https://codereview.qt-project.org/#change%2C71010"},{"type":"WEB","url":"https://codereview.qt-project.org/#change%2C71368"}],"schema_version":"1.7.5"}