trolltech qt vulnerabilities and exploits

(subscribe to this query)

Qt prior to 3.3.4 searches the BUILD_PREFIX directory, which could be world-writable, to load shared libraries regardless of the LD_LIBRARY_PATH environment variable, which allows local users to execute arbitrary programs.

Trolltech Qt 3.0.3 Trolltech Qt 3.1 Trolltech Qt 3.3.2 Trolltech Qt 3.1.1 Trolltech Qt 3.1.2 Trolltech Qt 3.2.1 Trolltech Qt 3.2.3 Trolltech Qt 3.3.0 Trolltech Qt 3.0 Trolltech Qt 3.0.5 Trolltech Qt 3.3.1 Trolltech Qt 3.3.3

Multiple format string vulnerabilities in (1) qtextedit.cpp, (2) qdatatable.cpp, (3) qsqldatabase.cpp, (4) qsqlindex.cpp, (5) qsqlrecord.cpp, (6) qglobal.cpp, and (7) qsvgdevice.cpp in QTextEdit in Trolltech Qt 3 prior to 3.3.8 20070727 allow remote malicious users to execute arb...

Heap-based buffer overflow in the BMP image format parser for the QT library (qt3) prior to 3.3.3 allows remote malicious users to cause a denial of service (application crash) and possibly execute arbitrary code.

1 EDB exploit

The XPM parser in the QT library (qt3) prior to 3.3.3 allows remote malicious users to cause a denial of service (application crash) via a malformed image file that triggers a null dereference, a different vulnerability than CVE-2004-0693.

The GIF parser in the QT library (qt3) prior to 3.3.3 allows remote malicious users to cause a denial of service (application crash) via a malformed image file that triggers a null dereference, a different vulnerability than CVE-2004-0692.

Trolltech Qt Assistant 1.0 in Trolltech Qt 3.0.3, when loaded from the Designer, opens port 7358 for interprocess communication, which allows remote malicious users to open arbitrary HTML pages and cause a denial of service.

Trolltech Qt Assistant 1.0

QSslSocket in Trolltech Qt 4.3.0 up to and including 4.3.2 does not properly verify SSL certificates, which might make it easier for remote malicious users to trick a user into accepting an invalid server certificate for a spoofed service, or trick a service into accepting an inv...

Trolltech Qsslsocket 4.3.0 Trolltech Qsslsocket 4.3.1 Trolltech Qsslsocket 4.3.2

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook