3571 matches found
[Full-disclosure] Secunia Research: KVIrc irc:// URI Handler Command Execution Vulnerability
====================================================================== Secunia Research 26/06/2007 - KVIrc irc:// URI Handler Command Execution Vulnerability - ====================================================================== Table of Contents Affected...
USN-452-1: KDE library vulnerability
The Qt library did not correctly handle truncated UTF8 strings, which could cause some applications to incorrectly filter malicious strings. If a Konqueror user were tricked into visiting a web site containing specially crafted strings, normal XSS prevention could be bypassed allowing a remote...
Slackware 10.2 / 11.0 / current : qt (SSA:2007-093-03)
New qt packages are available for Slackware 10.2, 11.0, and -current to fix a security issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Slackware Security Advisory 2007-093-03. The text itself is copyright C...
[slackware-security] qt
New qt packages are available for Slackware 10.2, 11.0, and -current to fix a security issue. More details about this issue may be found in the Common Vulnerabilities and Exposures CVE database: https://vulners.com/cve/CVE-2007-0242 Here are the details from the Slackware 11.0 ChangeLog:...
Cross site scripting
The UTF-8 decoder in codecs/qutfcodec.cpp in Qt 3.3.8 and 4.2.3 does not reject long UTF-8 sequences as required by the standard, which allows remote attackers to conduct cross-site scripting XSS and directory traversal attacks via long sequences that decode to dangerous metacharacters...
CVE-2007-0242
The UTF-8 decoder in codecs/qutfcodec.cpp in Qt 3.3.8 and 4.2.3 does not reject long UTF-8 sequences as required by the standard, which allows remote attackers to conduct cross-site scripting XSS and directory traversal attacks via long sequences that decode to dangerous metacharacters...
CVE-2007-0242
The UTF-8 decoder in codecs/qutfcodec.cpp in Qt 3.3.8 and 4.2.3 does not reject long UTF-8 sequences as required by the standard, which allows remote attackers to conduct cross-site scripting XSS and directory traversal attacks via long sequences that decode to dangerous metacharacters...
CVE-2007-0242
The UTF-8 decoder in codecs/qutfcodec.cpp in Qt 3.3.8 and 4.2.3 does not reject long UTF-8 sequences as required by the standard, which allows remote attackers to conduct cross-site scripting XSS and directory traversal attacks via long sequences that decode to dangerous metacharacters...
CVE-2007-0242
CVE-2007-0242 affects Qt 3.3.8 and 4.2.3 where the UTF-8 decoder in codecs/qutfcodec.cpp does not reject overlong UTF-8 sequences as required by the standard. This allows remote attackers to perform cross-site scripting (XSS) and directory traversal by sending long sequences that decode to danger...
CVE-2007-0242
Removed by vendor...
CVE-2007-0242: Undefined Security Weakness
The UTF-8 decoder in codecs/qutfcodec.cpp in Qt 3.3.8 and 4.2.3 does not reject long UTF-8 sequences as required by the standard, which allows remote attackers to conduct cross-site scripting XSS and directory traversal attacks via long sequences that decode to dangerous metacharacters...
GLSA-200703-06 : AMD64 x86 emulation Qt library: Integer overflow
The remote host is affected by the vulnerability described in GLSA-200703-06 AMD64 x86 emulation Qt library: Integer overflow An integer overflow flaw has been found in the pixmap handling of Qt, making the AMD64 x86 emulation Qt library vulnerable as well. Impact : By enticing a user to open a...
AMD64 x86 emulation Qt library: Integer overflow
Background The AMD64 x86 emulation Qt library for AMD64 emulates the x86 32-bit Qt library on the AMD64 64-bit architecture. Description An integer overflow flaw has been found in the pixmap handling of Qt, making the AMD64 x86 emulation Qt library vulnerable as well. Impact By enticing a user to...
Mandrake Linux Security Advisory : kdelibs (MDKSA-2006:186)
A vulnerability was discovered in the way that Qt handled pixmap images and the KDE khtml library used Qt in such a way that untrusted parameters could be passed to Qt, resulting in an integer overflow. This flaw could be exploited by a remote attacker in a malicious website that, when viewed by ...
Mandrake Linux Security Advisory : qt (MDKSA-2006:187)
An integer overflow was discovered in the way that Qt handled pixmap images. This flaw could be exploited by a remote attacker in a malicious website that, when viewed by an individual using an application that uses Qt like Konqueror, would cause it to crash or possibly execute arbitrary code wit...
SUSE-SA:2006:063: Qt
The remote host is missing the patch for the advisory SUSE-SA:2006:063 Qt. Multiple integer overflows have been found in image processing functions within the Qt class library, used for instance by the web browser 'konqueror' and its rendering engine 'khtml'. These problems could potentially lead...
Slackware 10.0 / 10.1 / 10.2 / 11.0 : qt (SSA:2006-298-01)
New qt packages are available for Slackware 10.0, 10.1, 10.2, and 11.0 to fix a possible security issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Slackware Security Advisory 2006-298-01. The text itself is...
Fedora Core 6 : qt-3.3.7-0.1.fc6 (2006-1055)
A security flaw was recently discovered in the way Qt 3.x pixmap images. This issue can occur only when transforming specially prepared images from untrusted sources. Qt 3.3.7 corrects this flaw. Note that Tenable Network Security has extracted the preceding description block directly from the...
Fedora Core 5 : qt-3.3.7-0.1.fc5 (2006-1056)
A security flaw was recently discovered in the way Qt 3.x pixmap images. This issue can occur only when transforming specially prepared images from untrusted sources. Qt 3.3.7 corrects this flaw. Note that Tenable Network Security has extracted the preceding description block directly from the...
