CVE-2007-4137

EPSS 3.55%
Veröffentlicht 18.09.2007 19:17:00
Zuletzt bearbeitet 09.04.2025 00:30:58
Quelle secalert@redhat.com
CVE-Watchlists
Login
Unerledigt
Login

Off-by-one error in the QUtf8Decoder::toUnicode function in Trolltech Qt 3 allows context-dependent attackers to cause a denial of service (crash) via a crafted Unicode string that triggers a heap-based buffer overflow.  NOTE: Qt 4 has the same error in the QUtf8Codec::convertToUnicode function, but it is not exploitable.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 39

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Trolltech ≫ Qt Version3.0

   Conectiva ≫ Linux Version9.0
   Conectiva ≫ Linux Version10.0
   Gentoo ≫ Linux
   Mandrakesoft ≫ Mandrake Linux Version9.2
   Mandrakesoft ≫ Mandrake Linux Version9.2 Editionamd64
   Mandrakesoft ≫ Mandrake Linux Version10.0
   Mandrakesoft ≫ Mandrake Linux Version10.0 Editionamd64
   Mandrakesoft ≫ Mandrake Linux Version2007
   Mandrakesoft ≫ Mandrake Linux Version2007 Editionx86_64
   Mandrakesoft ≫ Mandrake Linux Version2007.1
   Mandrakesoft ≫ Mandrake Linux Version2007.1 Editionx86_64
   Mandrakesoft ≫ Mandrake Linux Corporate Server Version3.0
   Mandrakesoft ≫ Mandrake Linux Corporate Server Version3.0 Editionx86_64
   Mandrakesoft ≫ Mandrake Linux Corporate Server Version4.0
   Mandrakesoft ≫ Mandrake Linux Corporate Server Version4.0 Editionx86_64
   Redhat ≫ Enterprise Linux Version2.1 Editionas
   Redhat ≫ Enterprise Linux Version2.1 Editionaw
   Redhat ≫ Enterprise Linux Version2.1 Editiones
   Redhat ≫ Enterprise Linux Version3.0 Editionas
   Redhat ≫ Enterprise Linux Version3.0 Editiones
   Redhat ≫ Enterprise Linux Version3.0 Editionws
   Redhat ≫ Enterprise Linux Version4.0 Editionas
   Redhat ≫ Enterprise Linux Version4.0 Editiones
   Redhat ≫ Enterprise Linux Version4.0 Editionws
   Redhat ≫ Enterprise Linux Version5.0 Editionclient
   Redhat ≫ Enterprise Linux Version5.0 Editionclient_workstation
   Redhat ≫ Enterprise Linux Version5.0 Editionserver
   Redhat ≫ Linux Version2.1 Editionaw_itanium
   Redhat ≫ Linux Version3.0
   Redhat ≫ Linux Version4.0
   Ubuntu ≫ Ubuntu Linux Version6.06_lts Editionamd64
   Ubuntu ≫ Ubuntu Linux Version6.06_lts Editioni386
   Ubuntu ≫ Ubuntu Linux Version6.06_lts Editionpowerpc
   Ubuntu ≫ Ubuntu Linux Version6.06_lts Editionsparc
   Ubuntu ≫ Ubuntu Linux Version6.10 Editionamd64
   Ubuntu ≫ Ubuntu Linux Version6.10 Editioni386
   Ubuntu ≫ Ubuntu Linux Version6.10 Editionpowerpc
   Ubuntu ≫ Ubuntu Linux Version6.10 Editionsparc
   Ubuntu ≫ Ubuntu Linux Version7.04 Editionamd64
   Ubuntu ≫ Ubuntu Linux Version7.04 Editioni386
   Ubuntu ≫ Ubuntu Linux Version7.04 Editionpowerpc
   Ubuntu ≫ Ubuntu Linux Version7.04 Editionsparc

Trolltech ≫ Qt Version3.0.3

Trolltech ≫ Qt Version3.0.5

Trolltech ≫ Qt Version3.1

Trolltech ≫ Qt Version3.1.1

Trolltech ≫ Qt Version3.1.2

Trolltech ≫ Qt Version3.2.1

Trolltech ≫ Qt Version3.2.3

Trolltech ≫ Qt Version3.3.0

Trolltech ≫ Qt Version3.3.1

Trolltech ≫ Qt Version3.3.2

Trolltech ≫ Qt Version3.3.3

Trolltech ≫ Qt Version3.3.4

Trolltech ≫ Qt Version3.3.5

Trolltech ≫ Qt Version3.3.6

Trolltech ≫ Qt Version3.3.7

Trolltech ≫ Qt Version3.3.8

Trolltech ≫ Qt Version4.1

Trolltech ≫ Qt Version4.1.4

Trolltech ≫ Qt Version4.1.5

Trolltech ≫ Qt Version4.2

Trolltech ≫ Qt Version4.2.1

Trolltech ≫ Qt Version4.2.3

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	3.55%	0.873

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	7.5	10	6.4	AV:N/AC:L/Au:N/C:P/I:P/A:P

CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

http://secunia.com/advisories/26987

http://www.novell.com/linux/security/advisories/2007_19_sr.html

ftp://patches.sgi.com/support/free/security/advisories/20070901-01-P.asc

http://secunia.com/advisories/26857

http://fedoranews.org/updates/FEDORA-2007-703.shtml

http://secunia.com/advisories/26804

http://secunia.com/advisories/27275

http://support.avaya.com/elmodocs2/security/ASA-2007-424.htm

http://www.redhat.com/support/errata/RHSA-2007-0883.html

http://fedoranews.org/updates/FEDORA-2007-221.shtml

http://secunia.com/advisories/26882

http://secunia.com/advisories/27996