4.3

CVE-2009-2700

src/network/ssl/qsslcertificate.cpp in Nokia Trolltech Qt 4.x does not properly handle a '\0' character in a domain name in the Subject Alternative Name field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority, a related issue to CVE-2009-2408.

Data is provided by the National Vulnerability Database (NVD)
Qt ≫ Qt Version4.0.0
Qt ≫ Qt Version4.0.1
Qt ≫ Qt Version4.1.0
Qt ≫ Qt Version4.1.1
Qt ≫ Qt Version4.1.2
Qt ≫ Qt Version4.1.3
Qt ≫ Qt Version4.1.4
Qt ≫ Qt Version4.1.5
Qt ≫ Qt Version4.2.0
Qt ≫ Qt Version4.2.1
Qt ≫ Qt Version4.2.3
Qt ≫ Qt Version4.3.0
Qt ≫ Qt Version4.3.1
Qt ≫ Qt Version4.3.2
Qt ≫ Qt Version4.3.3
Qt ≫ Qt Version4.3.4
Qt ≫ Qt Version4.3.5
Qt ≫ Qt Version4.4.0
Qt ≫ Qt Version4.4.1
Qt ≫ Qt Version4.4.2
Qt ≫ Qt Version4.4.3
Qt ≫ Qt Version4.5.0
Qt ≫ Qt Version4.5.1
Qt ≫ Qt Version4.5.2
Qt ≫ Qt Version4.5.3
Qt ≫ Qt Version4.6.0
Qt ≫ Qt Version4.6.0 Updaterc1
Qt ≫ Qt Version4.6.1
Qt ≫ Qt Version4.6.2
Qt ≫ Qt Version4.6.3
Qt ≫ Qt Version4.6.4
Qt ≫ Qt Version4.7.0
Qt ≫ Qt Version4.7.1
Qt ≫ Qt Version4.7.2
Qt ≫ Qt Version4.7.3
Qt ≫ Qt Version4.7.4
Qt ≫ Qt Version4.7.5
Qt ≫ Qt Version4.8.0
Qt ≫ Qt Version4.8.1
Qt ≫ Qt Version4.8.2
Qt ≫ Qt Version4.8.3
Qt ≫ Qt Version4.8.4
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.25% 0.453
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 4.3 8.6 2.9
AV:N/AC:M/Au:N/C:N/I:P/A:N
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.