CVE-2007-5965

CVE-2007-5965 affects Trolltech Qt 4.3.0–4.3.2, where QSslSocket does not correctly verify SSL certificates. This can allow remote attackers to trick users into accepting an invalid server certificate for a spoofed service or cause a service to accept an invalid client certificate (I) as describe...

Trolltech Qt QSslSocket类证书验证绕过安全限制漏洞

BUGTRAQ ID: 27112 CVECAN ID: CVE-2007-5965 Qt是一款C++应用开发工具，包括类库和跨平台开发工具。 Qt可能没有对SSL连接中的QSslSocket类证书执行验证，使用QSslSocket的应用可能受骗接受伪造的证书，这有助于攻击者执行网络钓鱼类的攻击。 Trolltech Qt 4.3.2 Trolltech Qt 4.3.1 Trolltech Qt 4.3.0 Trolltech --------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

Heap overflow

Off-by-one error in the QUtf8Decoder::toUnicode function in Trolltech Qt 3 allows context-dependent attackers to cause a denial of service crash via a crafted Unicode string that triggers a heap-based buffer overflow. NOTE: Qt 4 has the same error in the QUtf8Codec::convertToUnicode function, but...

CVE-2007-3388

Multiple format string vulnerabilities in 1 qtextedit.cpp, 2 qdatatable.cpp, 3 qsqldatabase.cpp, 4 qsqlindex.cpp, 5 qsqlrecord.cpp, 6 qglobal.cpp, and 7 qsvgdevice.cpp in QTextEdit in Trolltech Qt 3 before 3.3.8 20070727 allow remote attackers to execute arbitrary code via format string specifier...

Format string

Multiple format string vulnerabilities in 1 qtextedit.cpp, 2 qdatatable.cpp, 3 qsqldatabase.cpp, 4 qsqlindex.cpp, 5 qsqlrecord.cpp, 6 qglobal.cpp, and 7 qsvgdevice.cpp in QTextEdit in Trolltech Qt 3 before 3.3.8 20070727 allow remote attackers to execute arbitrary code via format string specifier...

CVE-2007-3388

Multiple format string vulnerabilities in 1 qtextedit.cpp, 2 qdatatable.cpp, 3 qsqldatabase.cpp, 4 qsqlindex.cpp, 5 qsqlrecord.cpp, 6 qglobal.cpp, and 7 qsvgdevice.cpp in QTextEdit in Trolltech Qt 3 before 3.3.8 20070727 allow remote attackers to execute arbitrary code via format string specifier...

CVE-2007-3388

CVE-2007-3388 affects Trolltech Qt 3 (Qt X11-free) with multiple format-string vulnerabilities in QTextEdit components (qtextedit.cpp, qdatatable.cpp, qsql*.cpp, qglobal.cpp, qsvgdevice.cpp) that could allow remote code execution via error-message text. Affected versions are Qt 3 prior to 3.3.8 (...

CVE-2007-3388

Multiple format string vulnerabilities in 1 qtextedit.cpp, 2 qdatatable.cpp, 3 qsqldatabase.cpp, 4 qsqlindex.cpp, 5 qsqlrecord.cpp, 6 qglobal.cpp, and 7 qsvgdevice.cpp in QTextEdit in Trolltech Qt 3 before 3.3.8 20070727 allow remote attackers to execute arbitrary code via format string specifier...

CVE-2007-3388

Removed by vendor...

[slackware-security] qt

New qt packages are available for Slackware 10.0, 10.1, 10.2, and 11.0 to fix a possible security issue. More details about this issue may be found in the Common Vulnerabilities and Exposures CVE database: https://vulners.com/cve/CVE-2006-4811 Trolltech has put out a press release which may be...

Trolltech QT Pixmap图形处理整数溢出漏洞

Qt是一款C++应用开发工具，包括类库和跨平台开放工具。 Qt处理Pixmap图形的方式存在整数溢出漏洞，远程攻击者可能利用此漏洞在用户机器上执行任意指令。 如果攻击者能够诱骗用户使用链接到Qt的应用程序（如knoqueror和kmail）处理特制的pixmap图形的话，就会导致向堆中写入任意数据，执行任意指令。 RedHat Enterprise Linux WS 4 RedHat Enterprise Linux WS 3 RedHat Enterprise Linux WS 2.1 RedHat Enterprise Linux ES 4 RedHat Enterprise Lin...

CVE-2002-1883

CVE-2002-1883 affects Trolltech Qt Assistant 1.0 within Trolltech Qt 3.0.3 when loaded from the Designer, which opens port 7358 for interprocess communication. This enables remote attackers to open arbitrary HTML pages and cause a denial of service. The connected Red Hat and CVE records corrobora...

CVE-2002-1883

Trolltech Qt Assistant 1.0 in Trolltech Qt 3.0.3, when loaded from the Designer, opens port 7358 for interprocess communication, which allows remote attackers to open arbitrary HTML pages and cause a denial of service...

CVE-2002-1883

Trolltech Qt Assistant 1.0 in Trolltech Qt 3.0.3, when loaded from the Designer, opens port 7358 for interprocess communication, which allows remote attackers to open arbitrary HTML pages and cause a denial of service...