Red Hat Security AdvisoryRHSA-2007:0883
qt security update
Released 2007-09-13 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Desktop version 3 qt-1:3.1.2-17.RHEL3, qt-1:3.1.2-17.RHEL3.i386, qt-MySQL-1:3.1.2-17.RHEL3 +9
- Red Hat Enterprise Linux (v. 5 server) qt-1:3.3.6-23.el5, qt-1:3.3.6-23.el5.i386, qt-1:3.3.6-23.el5.ia64 +29
- Red Hat Enterprise Linux AS (Advanced Server) version 2.1 qt-1:2.3.1-14.EL2, qt-1:2.3.1-14.EL2.i386, qt-1:2.3.1-14.EL2.ia64 +8
- Red Hat Enterprise Linux AS version 3 qt-1:3.1.2-17.RHEL3, qt-1:3.1.2-17.RHEL3.i386, qt-1:3.1.2-17.RHEL3.ia64 +21
- Red Hat Enterprise Linux AS version 4 qt-1:3.3.3-13.RHEL4, qt-1:3.3.3-13.RHEL4.i386, qt-1:3.3.3-13.RHEL4.ia64 +25
- Red Hat Enterprise Linux Desktop (v. 5 client) qt-1:3.3.6-23.el5, qt-1:3.3.6-23.el5.i386, qt-MySQL-1:3.3.6-23.el5 +7
- Red Hat Enterprise Linux Desktop Workstation (v. 5 client) qt-1:3.3.6-23.el5, qt-designer-1:3.3.6-23.el5, qt-designer-1:3.3.6-23.el5.i386 +4
- Red Hat Enterprise Linux Desktop version 4 qt-1:3.3.3-13.RHEL4, qt-1:3.3.3-13.RHEL4.i386, qt-MySQL-1:3.3.3-13.RHEL4 +11
- Red Hat Enterprise Linux ES version 2.1 qt-1:2.3.1-14.EL2, qt-1:2.3.1-14.EL2.i386, qt-Xt-1:2.3.1-14.EL2.i386 +3
- Red Hat Enterprise Linux ES version 3 qt-1:3.1.2-17.RHEL3, qt-1:3.1.2-17.RHEL3.i386, qt-1:3.1.2-17.RHEL3.ia64 +15
- Red Hat Enterprise Linux ES version 4 qt-1:3.3.3-13.RHEL4, qt-1:3.3.3-13.RHEL4.i386, qt-1:3.3.3-13.RHEL4.ia64 +18
- Red Hat Enterprise Linux WS version 2.1 qt-1:2.3.1-14.EL2, qt-1:2.3.1-14.EL2.i386, qt-Xt-1:2.3.1-14.EL2.i386 +3
- Red Hat Enterprise Linux WS version 3 qt-1:3.1.2-17.RHEL3, qt-1:3.1.2-17.RHEL3.i386, qt-1:3.1.2-17.RHEL3.ia64 +15
- Red Hat Enterprise Linux WS version 4 qt-1:3.3.3-13.RHEL4, qt-1:3.3.3-13.RHEL4.i386, qt-1:3.3.3-13.RHEL4.ia64 +18
- Red Hat Linux Advanced Workstation 2.1 qt-1:2.3.1-14.EL2, qt-1:2.3.1-14.EL2.ia64, qt-Xt-1:2.3.1-14.EL2.ia64 +3
Fixes 2 records
Priority LOW 37
Off-by-one error in the QUtf8Decoder::toUnicode function in Trolltech Qt 3 allows context-dependent attackers to cause a denial of service (crash) via a crafted Unicode string that triggers a heap-based buffer overflow.
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.0234 · Published 2007-09-18 · Fixed CWE-119
Priority LOW 24
The UTF-8 decoder in codecs/qutfcodec.cpp in Qt 3.3.8 and 4.2.3 does not reject long UTF-8 sequences as required by the standard, which allows remote attackers to conduct cross-site scripting (XSS) and directory traversa…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.0212 · Published 2007-04-03 · Fixed
