DSA-1988-1 qt4-x11 - several vulnerabilities

Bulletin has no description...

CVE-2009-3933

WebKit before r50173, as used in Google Chrome before 3.0.195.32, allows remote attackers to cause a denial of service CPU consumption via a web page that calls the JavaScript setInterval method, which triggers an incompatibility between the WTF::currentTime and base::Time functions...

Ubuntu 8.10 / 9.04 : qt4-x11 vulnerabilities (USN-857-1)

It was discovered that QtWebKit did not properly handle certain SVGPathList data structures. If a user were tricked into viewing a malicious website, an attacker could exploit this to execute arbitrary code with the privileges of the user invoking the program. CVE-2009-0945 Several flaws were...

Ubuntu: Security Advisory (USN-857-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu USN-857-1 (qt4-x11)

The remote host is missing an update to qt4-x11 announced via advisory USN-857-1. OpenVAS Vulnerability Test $Id: ubuntu8571.nasl 7969 2017-12-01 09:23:16Z santu $ $Id: ubuntu8571.nasl 7969 2017-12-01 09:23:16Z santu $ Description: Auto-generated from advisory USN-857-1 qt4-x11 Authors: Thomas...

Ubuntu USN-829-1 (qt4-x11)

The remote host is missing an update to qt4-x11 announced via advisory USN-829-1. OpenVAS Vulnerability Test $Id: ubuntu8291.nasl 7969 2017-12-01 09:23:16Z santu $ $Id: ubuntu8291.nasl 7969 2017-12-01 09:23:16Z santu $ Description: Auto-generated from advisory USN-829-1 qt4-x11 Authors: Thomas...

Ubuntu: Security Advisory (USN-829-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mandrake Security Advisory MDVSA-2009:225 (qt4)

The remote host is missing an update to qt4 announced via advisory MDVSA-2009:225. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-on...

Security fix for the ALT Linux 5 package qt4 version 4.5.2-alt6

Sept. 11, 2009 Sergey V Turchin 4.5.2-alt6 - add patch to fix CVE-2009-2700 - patch from kde-qt to add support for isOpen in mysql driver plugin - add patch from MDV to fix qmake wformat patch...

Security fix for the ALT Linux 8 package qt4 version 4.5.2-alt6

Sept. 11, 2009 Sergey V Turchin 4.5.2-alt6 - add patch to fix CVE-2009-2700 - patch from kde-qt to add support for isOpen in mysql driver plugin - add patch from MDV to fix qmake wformat patch...

Ubuntu 8.04 LTS / 8.10 / 9.04 : qt4-x11 vulnerability (USN-829-1)

It was discovered that Qt did not properly handle certificates with NULL characters in the Subject Alternative Name field of X.509 certificates. An attacker could exploit this to perform a man in the middle attack to view sensitive information or alter encrypted communications. CVE-2009-2700. Not...

[ MDVSA-2009:225 ] qt4

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2009:225 http://www.mandriva.com/security/ Package : qt4 Date : September 8, 2009 Affected: 2009.0, 2009.1, Enterprise Server 5.0 Problem Description: A vulnerability has been found and corrected in qt4:...

Nokia Trolltech Qt4 SSL certificate spoofing

certificate spoofing with 0 symbol in domain name...

Mandriva Linux Security Advisory : qt4 (MDVSA-2009:225)

A vulnerability has been found and corrected in qt4 : src/network/ssl/qsslcertificate.cpp in Nokia Trolltech Qt 4.x does not properly handle a '' character in a domain name in the Subject Alternative Name field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary S...

Fedora Core 11 FEDORA-2009-6972 (poppler)

The remote host is missing an update to poppler announced via advisory FEDORA-2009-6972. OpenVAS Vulnerability Test $Id: fcore20096972.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-6972 poppler Authors: Thomas Reinke Copyright: Copyright c 2009...

openSUSE Security Update : libpoppler-devel (libpoppler-devel-77)

This update fixes an code execution bug. CVE-2008-2950 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update libpoppler-devel-77. The text description of this plugin is C SUSE LLC...

CVE-2009-1693

WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1 allows remote attackers to read images from arbitrary web sites via a CANVAS element with an SVG image, related to a "cross-site image capture issue."...

CVE-2009-1694

WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1 does not properly handle redirects, which allows remote attackers to read images from arbitrary web sites via vectors involving a CANVAS element and redirection, related to a "cross-site...

CVE-2009-1712

WebKit in Apple Safari before 4.0 does not prevent remote loading of local Java applets, which allows remote attackers to execute arbitrary code, gain privileges, or obtain sensitive information via an APPLET or OBJECT element...

CVE-2009-1690

Use-after-free vulnerability in WebKit, as used in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, iPhone OS for iPod touch 1.1 through 2.2.1, Google Chrome 1.0.154.53, and possibly other products, allows remote attackers to execute arbitrary code or cause a denial of service memory...