Qt Creator contains a flaw that may allow an attacker to gain access to unauthorized privileges. The issue is triggered when the program places a zero-length directory name in the LD_LIBRARY_PATH, allowing a local attacker to gain elevated privileges via a path subversion vulnerability.
Classification
Location:
Local Access Required
Attack Type:
Input Manipulation
Impact:
Loss of Integrity
Solution:
Upgrade
Exploit:
Exploit Unknown
Disclosure:
Vendor Verified
Solution
Upgrade to version 2.0.1 or higher, as it has been reported to fix this vulnerability. An upgrade is required as there are no known workarounds.
