Red Hat Security AdvisoryRHSA-2011:1324
qt4 security update
Released 2011-09-21 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- RHEL Desktop Workstation (v. 5 client) qt4-4.2.1-1.el5_7.1, qt4-devel-4.2.1-1.el5_7.1, qt4-devel-4.2.1-1.el5_7.1.i386
- Red Hat Enterprise Linux (v. 5 server) qt4-4.2.1-1.el5_7.1, qt4-4.2.1-1.el5_7.1.i386, qt4-4.2.1-1.el5_7.1.ia64 +25
- Red Hat Enterprise Linux Desktop (v. 5 client) qt4-4.2.1-1.el5_7.1, qt4-4.2.1-1.el5_7.1.i386, qt4-doc-4.2.1-1.el5_7.1 +9
Fixes 2 records
Priority MEDIUM 50
Heap-based buffer overflow in the Lookup_MarkMarkPos function in the HarfBuzz module (harfbuzz-gpos.c), as used by Qt before 4.7.4 and Pango, allows remote attackers to cause a denial of service (crash) and possibly exec…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.07171 · Published 2012-06-16 · Fixed CWE-787
Priority LOW 24
The UTF-8 decoder in codecs/qutfcodec.cpp in Qt 3.3.8 and 4.2.3 does not reject long UTF-8 sequences as required by the standard, which allows remote attackers to conduct cross-site scripting (XSS) and directory traversa…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.0212 · Published 2007-04-03 · Fixed
