Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
debiancveDebian Security Bug TrackerDEBIANCVE:CVE-2007-0242
HistoryApr 03, 2007 - 4:19 p.m.

CVE-2007-0242

2007-04-0316:19:00
Debian Security Bug Tracker
security-tracker.debian.org
9

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.027 Low

EPSS

Percentile

90.4%

JSON

The UTF-8 decoder in codecs/qutfcodec.cpp in Qt 3.3.8 and 4.2.3 does not reject long UTF-8 sequences as required by the standard, which allows remote attackers to conduct cross-site scripting (XSS) and directory traversal attacks via long sequences that decode to dangerous metacharacters.

OSVersionArchitecturePackageVersionFilename
Debian10allqt4-x11< 4.2.2-2qt4-x11_4.2.2-2_all.deb

Related

nessus 24
debian 2
openvas 26
prion 1
veracode 1
ubuntucve 1
cve 1
slackware 1
securityvulns 1
ubuntu 1
centos 4
redhat 3
oraclelinux 3
fedora 1
nessus
nessus
Mandrake Linux Security Advisory : kdelibs (MDKSA-2007:076)
2007-04-05 00:00:00
openSUSE 10 Security Update : libqt4 (libqt4-3056)
2007-10-17 00:00:00
openSUSE 10 Security Update : qt (qt-3050)
2007-10-17 00:00:00
debian
debian
[SECURITY] [DSA 1292-1] New qt4-x11 packages fix cross-site scripting vulnerability
2007-05-15 22:22:07
[SECURITY] [DSA 1292-1] New qt4-x11 packages fix cross-site scripting vulnerability
2007-05-15 22:22:07
openvas
openvas
Mandriva Update for qt3 MDKSA-2007:074 (qt3)
2009-04-09 00:00:00
Ubuntu Update for kdelibs, qt-x11-free vulnerability USN-452-1
2009-03-23 00:00:00
Mandriva Update for qt4 MDKSA-2007:075 (qt4)
2009-04-09 00:00:00
prion
prion
Cross site scripting
2007-04-03 16:19:00
veracode
veracode
Cross-site Scripting (XSS)
2020-04-10 00:17:41
ubuntucve
ubuntucve
CVE-2007-0242
2007-04-03 00:00:00
cve
cve
CVE-2007-0242
2007-04-03 16:19:00
slackware
slackware
[slackware-security] qt
2007-04-03 23:23:35
securityvulns
securityvulns
QT / KJS UTF-8 decoding security vulnerability
2007-04-05 00:00:00
ubuntu
ubuntu
KDE library vulnerability
2007-04-11 00:00:00
centos
centos
qt security update
2007-09-14 01:30:43
qt4 security update
2011-09-22 03:19:27
qt security update
2007-09-13 18:50:19
redhat
redhat
(RHSA-2011:1324) Moderate: qt4 security update
2011-09-21 00:00:00
(RHSA-2007:0883) Important: qt security update
2007-09-13 00:00:00
(RHSA-2007:0909) Moderate: kdelibs security update
2007-10-08 00:00:00
oraclelinux
oraclelinux
Important: qt security update
2007-09-13 00:00:00
qt4 security update
2011-09-21 00:00:00
Moderate: kdelibs security update
2007-10-08 00:00:00
fedora
fedora
[SECURITY] Fedora Core 6 Update: qt-3.3.8-2.fc6
2007-09-18 22:38:37

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.027 Low

EPSS

Percentile

90.4%

JSON
Related for DEBIANCVE:CVE-2007-0242
nessus24debian2openvas26prion1veracode1ubuntucve1cve1slackware1securityvulns1ubuntu1centos4redhat3oraclelinux3fedora1