KDE library vulnerability

2007-04-1100:00:00

ubuntu.com

5.6 Medium

AI Score

Confidence

Low

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.027 Low

EPSS

Percentile

90.4%

JSON

Releases

Ubuntu 6.10
Ubuntu 6.06
Ubuntu 5.10

Details

The Qt library did not correctly handle truncated UTF8 strings, which
could cause some applications to incorrectly filter malicious strings.
If a Konqueror user were tricked into visiting a web site containing
specially crafted strings, normal XSS prevention could be bypassed
allowing a remote attacker to steal confidential data.

OSVersionArchitecturePackageVersionFilename
Ubuntu6.10noarchlibqt3-mt< 3:3.3.6-3ubuntu3.1UNKNOWN
Ubuntu6.10noarchkdelibs4c2a< 4:3.5.5-0ubuntu3.4UNKNOWN
Ubuntu6.06noarchlibqt3-mt< 3:3.3.6-1ubuntu6.2UNKNOWN
Ubuntu6.06noarchkdelibs4c2a< 4:3.5.2-0ubuntu18.4UNKNOWN
Ubuntu5.10noarchlibqt3-mt< 3:3.3.4-8ubuntu5.2UNKNOWN
Ubuntu5.10noarchkdelibs4c2< 4:3.4.3-0ubuntu2.4UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Ubuntu	6.10	noarch	libqt3-mt	< 3:3.3.6-3ubuntu3.1	UNKNOWN
Ubuntu	6.10	noarch	kdelibs4c2a	< 4:3.5.5-0ubuntu3.4	UNKNOWN
Ubuntu	6.06	noarch	libqt3-mt	< 3:3.3.6-1ubuntu6.2	UNKNOWN
Ubuntu	6.06	noarch	kdelibs4c2a	< 4:3.5.2-0ubuntu18.4	UNKNOWN
Ubuntu	5.10	noarch	libqt3-mt	< 3:3.3.4-8ubuntu5.2	UNKNOWN
Ubuntu	5.10	noarch	kdelibs4c2	< 4:3.4.3-0ubuntu2.4	UNKNOWN