Design/Logic Flaw

Qt for Android prior to 5.9.0 allows remote attackers to execute arbitrary OS commands via unspecified vectors...

Design/Logic Flaw

A vulnerability in applications created using Qt for Android prior to 5.9.3 allows attackers to alter environment variables via unspecified vectors...

UBUNTU-CVE-2017-10904

Qt for Android prior to 5.9.0 allows remote attackers to execute arbitrary OS commands via unspecified vectors...

UBUNTU-CVE-2017-10905

A vulnerability in applications created using Qt for Android prior to 5.9.3 allows attackers to alter environment variables via unspecified vectors...

CVE-2017-10905

A vulnerability in applications created using Qt for Android prior to 5.9.3 allows attackers to alter environment variables via unspecified vectors...

CVE-2017-10904: Improper Neutralization of Special Elements used in an OS Command

Qt for Android prior to 5.9.0 allows remote attackers to execute arbitrary OS commands via unspecified vectors...

CVE-2017-10905: Undefined Security Weakness

A vulnerability in applications created using Qt for Android prior to 5.9.3 allows attackers to alter environment variables via unspecified vectors...

CVE-2017-10904

Qt for Android prior to 5.9.0 allows remote attackers to execute arbitrary OS commands via unspecified vectors...

CVE-2017-10905

CVE-2017-10905 affects applications built with Qt for Android before 5.9.3 . The flaw allows an attacker to alter environment variables via unspecified vectors . Root cause is a vulnerability in how Qt on Android handles environment-related data. Exploitation details and vectors are not specified...

CVE-2017-10904

CVE-2017-10904 affects Qt for Android prior to 5.9.0, where remote attackers can execute arbitrary OS commands via unspecified vectors. Root cause is not detailed in the provided documents, but the vulnerability impacts Android builds using Qt’s framework up to version 5.8.x. Practical impact is ...

CVE-2017-10905

A vulnerability in applications created using Qt for Android prior to 5.9.3 allows attackers to alter environment variables via unspecified vectors...

PT-2017-11596

Name of the Vulnerable Software and Affected Versions Qt for Android versions prior to 5.9.0 Description The issue allows remote attackers to execute arbitrary OS commands. Recommendations For Qt for Android versions prior to 5.9.0, update to version 5.9.0 or later to resolve the issue...

PT-2017-11597

Name of the Vulnerable Software and Affected Versions Qt for Android versions prior to 5.9.3 Description A vulnerability in applications created using Qt for Android allows attackers to alter environment variables via unspecified vectors. Recommendations For versions prior to 5.9.3, update to...

Qt for Android environment variables alteration

Overview Qt for Android contains an information alteration vulnerability. Satoru Nagaoka of Cyber Defense Institute, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. Impact A remote attacker may alter environem...

Qt for Android vulnerable to OS command injection

Overview Qt for Android provided by The Qt Company contains an OS command injection vulnerability CWE-78. Satoru Nagaoka of Cyber Defense Institute, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. Impact A...

JVN#67389262: Qt for Android vulnerable to OS command injection

Qt for Android provided by The Qt Company contains an OS command injection vulnerability CWE-78. Impact A remote attacker may execute an arbitrary OS command. Solution Update the Software Update to the latest version of software according to the information provided by the developer. Apply the...

JVN#27342829: Qt for Android environment variables alteration

Qt for Android contains an information alteration vulnerability. Impact A remote attacker may alter environemt variables of the apps created using Qt. As a result, arbitrary code may be executed. Solution Update the Software Update to the latest version of software according to the information...

[SECURITY] Fedora 26 Update: calamares-3.1.8-1.fc26

Calamares is a distribution-independent installer framework, designed to in stall from a live CD/DVD/USB environment to a hard disk. It includes a graphical installation program based on Qt 5. This package includes the Calamares framework and the required configuration files to produce a working...

Security advisory about Qt for Android

Two vulnerabilities have been identified in Qt for Android which could be used by a malicious application to hijack an existing Qt for Android application on the same device. The vulnerabilities in question were found by Satoru Nagaoka from Cyber Defense Institute, Inc., and have been assigned th...

PT-2020-8189

Name of the Vulnerable Software and Affected Versions: bitcoind and Bitcoin-Qt versions prior to 0.15.1 Description: The issue results from an integer signedness error when an attacker-controlled SOCKS proxy server responds with an acknowledgement of an unexpected target domain name, leading to a...