CVE-2002-1883: Undefined Security Weakness

Trolltech Qt Assistant 1.0 in Trolltech Qt 3.0.3, when loaded from the Designer, opens port 7358 for interprocess communication, which allows remote attackers to open arbitrary HTML pages and cause a denial of service...

CVE-2005-0627

CVE-2005-0627 (Qt) : Qt before 3.3.4 searches the BUILD_PREFIX directory, which can be world-writable, to load shared libraries, effectively bypassing LD_LIBRARY_PATH and enabling a local user to execute arbitrary code. Affected product/versions: Qt up to 3.3.x prior to 3.3.4. Impact: local privi...

CVE-2005-0627

Qt before 3.3.4 searches the BUILDPREFIX directory, which could be world-writable, to load shared libraries regardless of the LDLIBRARYPATH environment variable, which allows local users to execute arbitrary programs...

CVE-2005-0627: Undefined Security Weakness

Qt before 3.3.4 searches the BUILDPREFIX directory, which could be world-writable, to load shared libraries regardless of the LDLIBRARYPATH environment variable, which allows local users to execute arbitrary programs...

GLSA-200503-01 : Qt: Untrusted library search path

The remote host is affected by the vulnerability described in GLSA-200503-01 Qt: Untrusted library search path Tavis Ormandy of the Gentoo Linux Security Audit Team has discovered that Qt searches for shared libraries in an untrusted, world-writable directory. Impact : A local attacker could crea...

Qt: Untrusted library search path

Background Qt is a cross-platform GUI toolkit used by KDE. Description Tavis Ormandy of the Gentoo Linux Security Audit Team has discovered that Qt searches for shared libraries in an untrusted, world-writable directory. Impact A local attacker could create a malicious shared object that would be...

GLSA-200502-31 : uim: Privilege escalation vulnerability

The remote host is affected by the vulnerability described in GLSA-200502-31 uim: Privilege escalation vulnerability Takumi Asaki discovered that uim insufficiently checks environment variables. setuid/setgid applications linked against libuim could end up executing arbitrary code. This...

uim: Privilege escalation vulnerability

Background uim is a simple, secure and flexible input method library. Description Takumi Asaki discovered that uim insufficiently checks environment variables. setuid/setgid applications linked against libuim could end up executing arbitrary code. This vulnerability only affects immodule-enabled ...

uim -- privilege escalation vulnerability

The uim developers reports: Takumi ASAKI discovered that uim always trusts environment variables. But this is not correct behavior, sometimes environment variables shouldn't be trusted. This bug causes privilege escalation when libuim is linked against setuid/setgid application. Since GTK+...

security flaw

The XPM parser in the QT library qt3 before 3.3.3 allows remote attackers to cause a denial of service application crash via a malformed image file that triggers a null dereference, a different vulnerability than CVE-2004-0693...

Debian DSA-542-1 : qt - unsanitised input

Several vulnerabilities were discovered in recent versions of Qt, a commonly used graphic widget set, used in KDE for example. The first problem allows an attacker to execute arbitrary code, while the other two only seem to pose a denial of service danger. The Common Vulnerabilities and Exposures...

CVE-2004-0691

Heap-based buffer overflow in the BMP image format parser for the QT library qt3 before 3.3.3 allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code...

CVE-2004-0693

The GIF parser in the QT library qt3 before 3.3.3 allows remote attackers to cause a denial of service application crash via a malformed image file that triggers a null dereference, a different vulnerability than CVE-2004-0692...

CVE-2004-0693

The GIF parser in the QT library qt3 before 3.3.3 allows remote attackers to cause a denial of service application crash via a malformed image file that triggers a null dereference, a different vulnerability than CVE-2004-0692...

CVE-2004-0691

Heap-based buffer overflow in the BMP image format parser for the QT library qt3 before 3.3.3 allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code...

CVE-2004-0692

The XPM parser in the QT library qt3 before 3.3.3 allows remote attackers to cause a denial of service application crash via a malformed image file that triggers a null dereference, a different vulnerability than CVE-2004-0693...

CVE-2004-0692

The XPM parser in the QT library qt3 before 3.3.3 allows remote attackers to cause a denial of service application crash via a malformed image file that triggers a null dereference, a different vulnerability than CVE-2004-0693...

Qt/imlib buffer overflow

Buffer overflow on BMP files paring...

[SECURITY] [DSA 542-1] New Qt packages fix arbitrary code execution and denial of service

-------------------------------------------------------------------------- Debian Security Advisory DSA 542-1 [email protected] http://www.debian.org/security/ Martin Schulze August 30th, 2004 http://www.debian.org/security/faq -...

[SECURITY] [DSA 542-1] New Qt packages fix arbitrary code execution and denial of service

-------------------------------------------------------------------------- Debian Security Advisory DSA 542-1 [email protected] http://www.debian.org/security/ Martin Schulze August 30th, 2004 http://www.debian.org/security/faq -...