CVE-2007-4137

EPSS 2.34%
Veröffentlicht 18.09.2007 19:17:00
Zuletzt bearbeitet 16.06.2026 22:43:28
Quelle secalert@redhat.com
CVE-Watchlists
Login
Unerledigt
Login

Off-by-one error in the QUtf8Decoder::toUnicode function in Trolltech Qt 3 allows context-dependent attackers to cause a denial of service (crash) via a crafted Unicode string that triggers a heap-based buffer overflow.  NOTE: Qt 4 has the same error in the QUtf8Codec::convertToUnicode function, but it is not exploitable.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 39

NVD 23 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Trolltech ≫ Qt Version3.0

   Conectiva ≫ Linux Version9.0
   Conectiva ≫ Linux Version10.0
   Gentoo ≫ Linux
   Mandrakesoft ≫ Mandrake Linux Version9.2
   Mandrakesoft ≫ Mandrake Linux Version9.2 Editionamd64
   Mandrakesoft ≫ Mandrake Linux Version10.0
   Mandrakesoft ≫ Mandrake Linux Version10.0 Editionamd64
   Mandrakesoft ≫ Mandrake Linux Version2007
   Mandrakesoft ≫ Mandrake Linux Version2007 Editionx86_64
   Mandrakesoft ≫ Mandrake Linux Version2007.1
   Mandrakesoft ≫ Mandrake Linux Version2007.1 Editionx86_64
   Mandrakesoft ≫ Mandrake Linux Corporate Server Version3.0
   Mandrakesoft ≫ Mandrake Linux Corporate Server Version3.0 Editionx86_64
   Mandrakesoft ≫ Mandrake Linux Corporate Server Version4.0
   Mandrakesoft ≫ Mandrake Linux Corporate Server Version4.0 Editionx86_64
   Redhat ≫ Enterprise Linux Version2.1 Editionas
   Redhat ≫ Enterprise Linux Version2.1 Editionaw
   Redhat ≫ Enterprise Linux Version2.1 Editiones
   Redhat ≫ Enterprise Linux Version3.0 Editionas
   Redhat ≫ Enterprise Linux Version3.0 Editiones
   Redhat ≫ Enterprise Linux Version3.0 Editionws
   Redhat ≫ Enterprise Linux Version4.0 Editionas
   Redhat ≫ Enterprise Linux Version4.0 Editiones
   Redhat ≫ Enterprise Linux Version4.0 Editionws
   Redhat ≫ Enterprise Linux Version5.0 Editionclient
   Redhat ≫ Enterprise Linux Version5.0 Editionclient_workstation
   Redhat ≫ Enterprise Linux Version5.0 Editionserver
   Redhat ≫ Linux Version2.1 Editionaw_itanium
   Redhat ≫ Linux Version3.0
   Redhat ≫ Linux Version4.0
   Ubuntu ≫ Ubuntu Linux Version6.06_lts Editionamd64
   Ubuntu ≫ Ubuntu Linux Version6.06_lts Editioni386
   Ubuntu ≫ Ubuntu Linux Version6.06_lts Editionpowerpc
   Ubuntu ≫ Ubuntu Linux Version6.06_lts Editionsparc
   Ubuntu ≫ Ubuntu Linux Version6.10 Editionamd64
   Ubuntu ≫ Ubuntu Linux Version6.10 Editioni386
   Ubuntu ≫ Ubuntu Linux Version6.10 Editionpowerpc
   Ubuntu ≫ Ubuntu Linux Version6.10 Editionsparc
   Ubuntu ≫ Ubuntu Linux Version7.04 Editionamd64
   Ubuntu ≫ Ubuntu Linux Version7.04 Editioni386
   Ubuntu ≫ Ubuntu Linux Version7.04 Editionpowerpc
   Ubuntu ≫ Ubuntu Linux Version7.04 Editionsparc

Trolltech ≫ Qt Version3.0.3

Trolltech ≫ Qt Version3.0.5

Trolltech ≫ Qt Version3.1

Trolltech ≫ Qt Version3.1.1

Trolltech ≫ Qt Version3.1.2

Trolltech ≫ Qt Version3.2.1

Trolltech ≫ Qt Version3.2.3

Trolltech ≫ Qt Version3.3.0

Trolltech ≫ Qt Version3.3.1

Trolltech ≫ Qt Version3.3.2

Trolltech ≫ Qt Version3.3.3

Trolltech ≫ Qt Version3.3.4

Trolltech ≫ Qt Version3.3.5

Trolltech ≫ Qt Version3.3.6

Trolltech ≫ Qt Version3.3.7

Trolltech ≫ Qt Version3.3.8

Trolltech ≫ Qt Version4.1

Trolltech ≫ Qt Version4.1.4

Trolltech ≫ Qt Version4.1.5

Trolltech ≫ Qt Version4.2

Trolltech ≫ Qt Version4.2.1

Trolltech ≫ Qt Version4.2.3

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	2.34%	0.814

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	7.5	10	6.4	AV:N/AC:L/Au:N/C:P/I:P/A:P

CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

http://secunia.com/advisories/26987

http://www.novell.com/linux/security/advisories/2007_19_sr.html

ftp://patches.sgi.com/support/free/security/advisories/20070901-01-P.asc

http://secunia.com/advisories/26857

http://fedoranews.org/updates/FEDORA-2007-703.shtml

http://secunia.com/advisories/26804

http://secunia.com/advisories/27275

http://support.avaya.com/elmodocs2/security/ASA-2007-424.htm

http://www.redhat.com/support/errata/RHSA-2007-0883.html

http://fedoranews.org/updates/FEDORA-2007-221.shtml

http://secunia.com/advisories/26882

http://secunia.com/advisories/27996

http://secunia.com/advisories/28021

http://security.gentoo.org/glsa/glsa-200712-08.xml

http://www.debian.org/security/2007/dsa-1426

http://bugs.gentoo.org/show_bug.cgi?id=192472

http://dist.trolltech.com/developer/download/175791_3.diff

http://dist.trolltech.com/developer/download/175791_4.diff

http://osvdb.org/39384

http://secunia.com/advisories/26778

Vendor Advisory

http://secunia.com/advisories/26782

Vendor Advisory

http://secunia.com/advisories/26811

Vendor Advisory

http://secunia.com/advisories/26868

http://secunia.com/advisories/27053

http://secunia.com/advisories/27382

http://security.gentoo.org/glsa/glsa-200710-28.xml

http://securitytracker.com/id?1018688

http://trolltech.com/company/newsroom/announcements/press.2007-09-03.7564032119

http://www.mandriva.com/security/advisories?name=MDKSA-2007:183

http://www.securityfocus.com/archive/1/481498/100/0/threaded

http://www.securityfocus.com/bid/25657

http://www.ubuntu.com/usn/usn-513-1

http://www.vupen.com/english/advisories/2007/3144

https://bugzilla.redhat.com/show_bug.cgi?id=269001

https://issues.rpath.com/browse/RPL-1751

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11159

https://nvd.nist.gov/vuln/detail/CVE-2007-4137

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2007-4137

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2007-4137

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2007-4137