4.3

CVE-2009-2700

src/network/ssl/qsslcertificate.cpp in Nokia Trolltech Qt 4.x does not properly handle a '\0' character in a domain name in the Subject Alternative Name field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority, a related issue to CVE-2009-2408.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Qt ≫ Qt Version4.0.0
Qt ≫ Qt Version4.0.1
Qt ≫ Qt Version4.1.0
Qt ≫ Qt Version4.1.1
Qt ≫ Qt Version4.1.2
Qt ≫ Qt Version4.1.3
Qt ≫ Qt Version4.1.4
Qt ≫ Qt Version4.1.5
Qt ≫ Qt Version4.2.0
Qt ≫ Qt Version4.2.1
Qt ≫ Qt Version4.2.3
Qt ≫ Qt Version4.3.0
Qt ≫ Qt Version4.3.1
Qt ≫ Qt Version4.3.2
Qt ≫ Qt Version4.3.3
Qt ≫ Qt Version4.3.4
Qt ≫ Qt Version4.3.5
Qt ≫ Qt Version4.4.0
Qt ≫ Qt Version4.4.1
Qt ≫ Qt Version4.4.2
Qt ≫ Qt Version4.4.3
Qt ≫ Qt Version4.5.0
Qt ≫ Qt Version4.5.1
Qt ≫ Qt Version4.5.2
Qt ≫ Qt Version4.5.3
Qt ≫ Qt Version4.6.0
Qt ≫ Qt Version4.6.0 Updaterc1
Qt ≫ Qt Version4.6.1
Qt ≫ Qt Version4.6.2
Qt ≫ Qt Version4.6.3
Qt ≫ Qt Version4.6.4
Qt ≫ Qt Version4.7.0
Qt ≫ Qt Version4.7.1
Qt ≫ Qt Version4.7.2
Qt ≫ Qt Version4.7.3
Qt ≫ Qt Version4.7.4
Qt ≫ Qt Version4.7.5
Qt ≫ Qt Version4.8.0
Qt ≫ Qt Version4.8.1
Qt ≫ Qt Version4.8.2
Qt ≫ Qt Version4.8.3
Qt ≫ Qt Version4.8.4
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.94% 0.563
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 4.3 8.6 2.9
AV:N/AC:M/Au:N/C:N/I:P/A:N
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

http://qt.gitorious.org/qt/qt/commit/802d8c02eaa0aa9cd8d0c6cbd18cd814e6337bc6
http://secunia.com/advisories/36536
Vendor Advisory
http://secunia.com/advisories/36702
Vendor Advisory
http://www.mandriva.com/security/advisories?name=MDVSA-2009:225
http://www.securityfocus.com/bid/36203
http://www.ubuntu.com/usn/usn-829-1
http://www.vupen.com/english/advisories/2009/2499
Vendor Advisory