Lucene search

K
ubuntuUbuntuUSN-368-1
HistoryOct 24, 2006 - 12:00 a.m.

Qt vulnerability

2006-10-2400:00:00
ubuntu.com
33

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

6.8

Confidence

Low

EPSS

0.115

Percentile

95.3%

Releases

  • Ubuntu 6.06
  • Ubuntu 5.10
  • Ubuntu 5.04

Details

An integer overflow was discovered in Qt’s image loader. By processing
a specially crafted image with an application that uses this library
(like Konqueror), a remote attacker could exploit this to execute
arbitrary code with the application’s privileges.

OSVersionArchitecturePackageVersionFilename
Ubuntu6.06noarchlibqt3-mt< 3:3.3.6-1ubuntu6.1UNKNOWN
Ubuntu5.10noarchlibqt3-mt< 3:3.3.4-8ubuntu5.1UNKNOWN
Ubuntu5.04noarchlibqt3c102< 3:3.3.3-7ubuntu3.1UNKNOWN
Ubuntu5.04noarchlibqt3c102-mt< 3:3.3.3-7ubuntu3.1UNKNOWN

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

6.8

Confidence

Low

EPSS

0.115

Percentile

95.3%