CVE-2007-4137

EPSS 2.34%
Veröffentlicht 18.09.2007 19:17:00
Zuletzt bearbeitet 16.06.2026 22:43:28
Erkennungen
Login

Off-by-one error in the QUtf8Decoder::toUnicode function in Trolltech Qt 3 allows context-dependent attackers to cause a denial of service (crash) via a crafted Unicode string that triggers a heap-based buffer overflow.  NOTE: Qt 4 has the same error in the QUtf8Codec::convertToUnicode function, but it is not exploitable.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 39

NVD 23 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Trolltech ≫ Qt Version 3.0

   Conectiva ≫ Linux Version 9.0
   Conectiva ≫ Linux Version 10.0
   Gentoo ≫ Linux
   Mandrakesoft ≫ Mandrake Linux Version 9.2
   Mandrakesoft ≫ Mandrake Linux Version 9.2 Edition amd64
   Mandrakesoft ≫ Mandrake Linux Version 10.0
   Mandrakesoft ≫ Mandrake Linux Version 10.0 Edition amd64
   Mandrakesoft ≫ Mandrake Linux Version 2007
   Mandrakesoft ≫ Mandrake Linux Version 2007 Edition x86_64
   Mandrakesoft ≫ Mandrake Linux Version 2007.1
   Mandrakesoft ≫ Mandrake Linux Version 2007.1 Edition x86_64
   Mandrakesoft ≫ Mandrake Linux Corporate Server Version 3.0
   Mandrakesoft ≫ Mandrake Linux Corporate Server Version 3.0 Edition x86_64
   Mandrakesoft ≫ Mandrake Linux Corporate Server Version 4.0
   Mandrakesoft ≫ Mandrake Linux Corporate Server Version 4.0 Edition x86_64
   Redhat ≫ Enterprise Linux Version 2.1 Edition as
   Redhat ≫ Enterprise Linux Version 2.1 Edition aw
   Redhat ≫ Enterprise Linux Version 2.1 Edition es
   Redhat ≫ Enterprise Linux Version 3.0 Edition as
   Redhat ≫ Enterprise Linux Version 3.0 Edition es
   Redhat ≫ Enterprise Linux Version 3.0 Edition ws
   Redhat ≫ Enterprise Linux Version 4.0 Edition as
   Redhat ≫ Enterprise Linux Version 4.0 Edition es
   Redhat ≫ Enterprise Linux Version 4.0 Edition ws
   Redhat ≫ Enterprise Linux Version 5.0 Edition client
   Redhat ≫ Enterprise Linux Version 5.0 Edition client_workstation
   Redhat ≫ Enterprise Linux Version 5.0 Edition server
   Redhat ≫ Linux Version 2.1 Edition aw_itanium
   Redhat ≫ Linux Version 3.0
   Redhat ≫ Linux Version 4.0
   Ubuntu ≫ Ubuntu Linux Version 6.06_lts Edition amd64
   Ubuntu ≫ Ubuntu Linux Version 6.06_lts Edition i386
   Ubuntu ≫ Ubuntu Linux Version 6.06_lts Edition powerpc
   Ubuntu ≫ Ubuntu Linux Version 6.06_lts Edition sparc
   Ubuntu ≫ Ubuntu Linux Version 6.10 Edition amd64
   Ubuntu ≫ Ubuntu Linux Version 6.10 Edition i386
   Ubuntu ≫ Ubuntu Linux Version 6.10 Edition powerpc
   Ubuntu ≫ Ubuntu Linux Version 6.10 Edition sparc
   Ubuntu ≫ Ubuntu Linux Version 7.04 Edition amd64
   Ubuntu ≫ Ubuntu Linux Version 7.04 Edition i386
   Ubuntu ≫ Ubuntu Linux Version 7.04 Edition powerpc
   Ubuntu ≫ Ubuntu Linux Version 7.04 Edition sparc

Trolltech ≫ Qt Version 3.0.3

Trolltech ≫ Qt Version 3.0.5

Trolltech ≫ Qt Version 3.1

Trolltech ≫ Qt Version 3.1.1

Trolltech ≫ Qt Version 3.1.2

Trolltech ≫ Qt Version 3.2.1

Trolltech ≫ Qt Version 3.2.3

Trolltech ≫ Qt Version 3.3.0

Trolltech ≫ Qt Version 3.3.1

Trolltech ≫ Qt Version 3.3.2

Trolltech ≫ Qt Version 3.3.3

Trolltech ≫ Qt Version 3.3.4

Trolltech ≫ Qt Version 3.3.5

Trolltech ≫ Qt Version 3.3.6

Trolltech ≫ Qt Version 3.3.7

Trolltech ≫ Qt Version 3.3.8

Trolltech ≫ Qt Version 4.1

Trolltech ≫ Qt Version 4.1.4

Trolltech ≫ Qt Version 4.1.5

Trolltech ≫ Qt Version 4.2

Trolltech ≫ Qt Version 4.2.1

Trolltech ≫ Qt Version 4.2.3

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	2.34%	0.814

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	7.5	10	6.4	AV:N/AC:L/Au:N/C:P/I:P/A:P

CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

http://secunia.com/advisories/26987

http://www.novell.com/linux/security/advisories/2007_19_sr.html

ftp://patches.sgi.com/support/free/security/advisories/20070901-01-P.asc

http://secunia.com/advisories/26857

http://fedoranews.org/updates/FEDORA-2007-703.shtml

http://secunia.com/advisories/26804

http://secunia.com/advisories/27275

http://support.avaya.com/elmodocs2/security/ASA-2007-424.htm

http://www.redhat.com/support/errata/RHSA-2007-0883.html

http://fedoranews.org/updates/FEDORA-2007-221.shtml

http://secunia.com/advisories/26882

http://secunia.com/advisories/27996

http://secunia.com/advisories/28021

http://security.gentoo.org/glsa/glsa-200712-08.xml

http://www.debian.org/security/2007/dsa-1426

http://bugs.gentoo.org/show_bug.cgi?id=192472

http://dist.trolltech.com/developer/download/175791_3.diff

http://dist.trolltech.com/developer/download/175791_4.diff

http://osvdb.org/39384

http://secunia.com/advisories/26778

Vendor Advisory

http://secunia.com/advisories/26782

Vendor Advisory

http://secunia.com/advisories/26811

Vendor Advisory

http://secunia.com/advisories/26868

http://secunia.com/advisories/27053

http://secunia.com/advisories/27382

http://security.gentoo.org/glsa/glsa-200710-28.xml

http://securitytracker.com/id?1018688

http://trolltech.com/company/newsroom/announcements/press.2007-09-03.7564032119

http://www.mandriva.com/security/advisories?name=MDKSA-2007:183

http://www.securityfocus.com/archive/1/481498/100/0/threaded

http://www.securityfocus.com/bid/25657

http://www.ubuntu.com/usn/usn-513-1

http://www.vupen.com/english/advisories/2007/3144

https://bugzilla.redhat.com/show_bug.cgi?id=269001

https://issues.rpath.com/browse/RPL-1751

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11159

https://nvd.nist.gov/vuln/detail/CVE-2007-4137

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2007-4137

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2007-4137

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2007-4137