Qt 4.6.3 - 'QSslSocketBackendPrivate::transmit()' Denial of Service

Source: http://aluigi.org/adv/qtsslame-adv.txt Luigi Auriemma Application: Qt http://qt.nokia.com Versions: = 4.6.3 Platforms: Windows, Mac OS X, Linux, mobile devices Bug: QSSLsocket endless loop Exploitation: remote, versus server Date: 29 Jun 2010 Author: Luigi Auriemma e-mail:...

CVE-2010-2621

The QSslSocketBackendPrivate::transmit function in srcnetworksslqsslsocketopenssl.cpp in Qt 4.6.3 and earlier allows remote attackers to cause a denial of service infinite loop via a malformed request...

CVE-2010-2621

The QSslSocketBackendPrivate::transmit function in srcnetworksslqsslsocketopenssl.cpp in Qt 4.6.3 and earlier allows remote attackers to cause a denial of service infinite loop via a malformed request...

Design/Logic Flaw

The QSslSocketBackendPrivate::transmit function in srcnetworksslqsslsocketopenssl.cpp in Qt 4.6.3 and earlier allows remote attackers to cause a denial of service infinite loop via a malformed request...

CVE-2010-2621

The QSslSocketBackendPrivate::transmit function in srcnetworksslqsslsocketopenssl.cpp in Qt 4.6.3 and earlier allows remote attackers to cause a denial of service infinite loop via a malformed request...

CVE-2010-2621

CVE-2010-2621 affects Qt 4.6.3 and earlier; the QSslSocketBackendPrivate::transmit() function can be triggered by a malformed request to cause a denial of service via an infinite loop. Connected advisories confirm unpatched status in some distributions and note that security updates exist (e.g., ...

CVE-2010-2621

Removed by vendor...

CVE-2010-2621

The QSslSocketBackendPrivate::transmit function in srcnetworksslqsslsocketopenssl.cpp in Qt 4.6.3 and earlier allows remote attackers to cause a denial of service infinite loop via a malformed request...

Fedora Update for kvirc FEDORA-2010-10529

Check for the Version of kvirc OpenVAS Vulnerability Test Fedora Update for kvirc FEDORA-2010-10529 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms...

Fedora Update for kvirc FEDORA-2010-10522

Check for the Version of kvirc OpenVAS Vulnerability Test Fedora Update for kvirc FEDORA-2010-10522 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms...

Fedora 13 : qt-4.6.2-17.fc13 (2010-8423)

fix multiple flaws in webkit: CVE-2010-0047, CVE-2010-0648, CVE-2010-0656 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing...

Fedora 11 : qt-4.6.2-17.fc11 (2010-8379)

fix multiple flaws in webkit: CVE-2010-0047, CVE-2010-0648, CVE-2010-0656 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing...

Fedora 11 : qt-4.6.2-8.fc11 (2010-4524)

This update fixes several WebKit security issues: CVE-2010-0046: CSS format argument memory corruption CVE-2010-0049: Use of freed line boxes in mixed LTR/RTL text CVE-2010-0050: Crash at HTMLParser after handling misnested style tags CVE-2010-0051 CVE-2010-0651: Remote information disclosure...

Fedora 12 : qt-4.6.2-8.fc12 (2010-4518)

This update fixes several WebKit security issues: CVE-2010-0046: CSS format argument memory corruption CVE-2010-0049: Use of freed line boxes in mixed LTR/RTL text CVE-2010-0050: Crash at HTMLParser after handling misnested style tags CVE-2010-0051 CVE-2010-0651: Remote information disclosure...

[SECURITY] Fedora 13 Update: kvirc-4.0.0-1.fc13

KVIrc is a free portable IRC client based on the excellent Qt GUI toolkit. KVirc is being written by Szymon Stefanek and the KVIrc Development Team with the contribution of many IRC addicted developers around the world...

Qt 4.6.3 - Remote Denial of Service

Qt 4.6.3 - Remote Denial of Service source: https://www.securityfocus.com/bid/41250/info Qt is prone to a denial-of-service vulnerability caused by an infinite loop condition. An attacker can exploit this issue to make the affected application unresponsive, denying service to legitimate users. Th...

Qt 4.6.3 - Remote Denial of Service

source: https://www.securityfocus.com/bid/41250/info Qt is prone to a denial-of-service vulnerability caused by an infinite loop condition. An attacker can exploit this issue to make the affected application unresponsive, denying service to legitimate users. The issue affects Qt versions 4.6.3 an...

QuickTalk 1.2 Information Disclosure

======================================================================= QuickTalk v1.2 Source code disclosure Multiple Vulnerabilities ======================================================================= 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\...

Security fix for the ALT Linux 8 package qt4 version 4.6.2-alt3

May 19, 2010 Sergey V Turchin 4.6.2-alt3 - update kde-qt patches - add cups fixes - add fixes for CVE-2010-0047 CVE-2010-0051 CVE-2010-0054 CVE-2010-0648 CVE-2010-0656 CVE-2010-0046 CVE-2010-0049 CVE-2010-0050 CVE-2010-0052 ALT23506...

Fedora Update for qt FEDORA-2010-8360

The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...