Read the docs
TI-2007-04005 Aliases CVE-2007-4137GHSA-4hrv-qfhv-9vh5

Off-by-one error in the QUtf8Decoder::toUnicode function in Trolltech Qt 3 allows…

Priority LOW 37CWE-119Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
— Not recorded in CVSS 2.0
Attack complexity
Low
Impact type
Code execution
Confidentiality · integrity · availability
Partial · Partial · Partial
Fix status
Fixed

Attack profile from CVSS 2.0 · NVD. Fix status from CNA and Red Hat. Impact type from CWE-119 and the CVSS impact.

Summary

Off-by-one error in the QUtf8Decoder::toUnicode function in Trolltech Qt 3 allows context-dependent attackers to cause a denial of service (crash) via a crafted Unicode string that triggers a heap-based buffer overflow. NOTE: Qt 4 has the same error in the QUtf8Codec::convertToUnicode function, but it is not exploitable.

Why it matters now

EPSS 0.0234 83rd percentileScored 2026-11-07
Fix Fixed Red Hat: 1 advisory

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 65

CPEVersionsRoleVendor
cpe:2.3:o:conectiva:linux:9.0:*:*:*:*:*:*:*9.0Running onConectiva
cpe:2.3:o:conectiva:linux:10.0:*:*:*:*:*:*:*10.0Running onConectiva
cpe:2.3:o:gentoo:linux:*:*:*:*:*:*:*:*all versionsRunning ongentoo
cpe:2.3:o:mandrakesoft:mandrake_linux:9.2:*:*:*:*:*:*:*9.2Running onMandrakesoft
cpe:2.3:o:mandrakesoft:mandrake_linux:9.2:*:amd64:*:*:*:*:*9.2Running onMandrakesoft
cpe:2.3:o:mandrakesoft:mandrake_linux:10.0:*:*:*:*:*:*:*10.0Running onMandrakesoft
cpe:2.3:o:mandrakesoft:mandrake_linux:10.0:*:amd64:*:*:*:*:*10.0Running onMandrakesoft
cpe:2.3:o:mandrakesoft:mandrake_linux:2007:*:*:*:*:*:*:*2007Running onMandrakesoft
cpe:2.3:o:mandrakesoft:mandrake_linux:2007:*:x86_64:*:*:*:*:*2007Running onMandrakesoft
cpe:2.3:o:mandrakesoft:mandrake_linux:2007.1:*:*:*:*:*:*:*2007.1Running onMandrakesoft
  • cpe:2.3:o:conectiva:linux:9.0:*:*:*:*:*:*:* Versions 9.0 Running on ·Conectiva
  • cpe:2.3:o:conectiva:linux:10.0:*:*:*:*:*:*:* Versions 10.0 Running on ·Conectiva
  • cpe:2.3:o:gentoo:linux:*:*:*:*:*:*:*:* Versions all versions Running on ·gentoo
  • cpe:2.3:o:mandrakesoft:mandrake_linux:9.2:*:*:*:*:*:*:* Versions 9.2 Running on ·Mandrakesoft
  • cpe:2.3:o:mandrakesoft:mandrake_linux:9.2:*:amd64:*:*:*:*:* Versions 9.2 Running on ·Mandrakesoft
  • cpe:2.3:o:mandrakesoft:mandrake_linux:10.0:*:*:*:*:*:*:* Versions 10.0 Running on ·Mandrakesoft
  • cpe:2.3:o:mandrakesoft:mandrake_linux:10.0:*:amd64:*:*:*:*:* Versions 10.0 Running on ·Mandrakesoft
  • cpe:2.3:o:mandrakesoft:mandrake_linux:2007:*:*:*:*:*:*:* Versions 2007 Running on ·Mandrakesoft
  • cpe:2.3:o:mandrakesoft:mandrake_linux:2007:*:x86_64:*:*:*:*:* Versions 2007 Running on ·Mandrakesoft
  • cpe:2.3:o:mandrakesoft:mandrake_linux:2007.1:*:*:*:*:*:*:* Versions 2007.1 Running on ·Mandrakesoft
Show 55 more CPE
CPEVersionsRoleVendor
cpe:2.3:o:mandrakesoft:mandrake_linux:2007.1:*:x86_64:*:*:*:*:*2007.1Running onMandrakesoft
cpe:2.3:o:mandrakesoft:mandrake_linux_corporate_server:3.0:*:*:*:*:*:*:*3.0Running onMandrakesoft
cpe:2.3:o:mandrakesoft:mandrake_linux_corporate_server:3.0:*:x86_64:*:*:*:*:*3.0Running onMandrakesoft
cpe:2.3:o:mandrakesoft:mandrake_linux_corporate_server:4.0:*:*:*:*:*:*:*4.0Running onMandrakesoft
cpe:2.3:o:mandrakesoft:mandrake_linux_corporate_server:4.0:*:x86_64:*:*:*:*:*4.0Running onMandrakesoft
cpe:2.3:o:redhat:enterprise_linux:2.1:*:as:*:*:*:*:*2.1Running onRed Hat
cpe:2.3:o:redhat:enterprise_linux:2.1:*:aw:*:*:*:*:*2.1Running onRed Hat
cpe:2.3:o:redhat:enterprise_linux:2.1:*:es:*:*:*:*:*2.1Running onRed Hat
cpe:2.3:o:redhat:enterprise_linux:3.0:*:as:*:*:*:*:*3.0Running onRed Hat
cpe:2.3:o:redhat:enterprise_linux:3.0:*:es:*:*:*:*:*3.0Running onRed Hat
cpe:2.3:o:redhat:enterprise_linux:3.0:*:ws:*:*:*:*:*3.0Running onRed Hat
cpe:2.3:o:redhat:enterprise_linux:4.0:*:as:*:*:*:*:*4.0Running onRed Hat
cpe:2.3:o:redhat:enterprise_linux:4.0:*:es:*:*:*:*:*4.0Running onRed Hat
cpe:2.3:o:redhat:enterprise_linux:4.0:*:ws:*:*:*:*:*4.0Running onRed Hat
cpe:2.3:o:redhat:enterprise_linux:5.0:*:client:*:*:*:*:*5.0Running onRed Hat
cpe:2.3:o:redhat:enterprise_linux:5.0:*:client_workstation:*:*:*:*:*5.0Running onRed Hat
cpe:2.3:o:redhat:enterprise_linux:5.0:*:server:*:*:*:*:*5.0Running onRed Hat
cpe:2.3:o:redhat:linux:2.1:*:aw_itanium:*:*:*:*:*2.1Running onRed Hat
cpe:2.3:o:redhat:linux:3.0:*:*:*:*:*:*:*3.0Running onRed Hat
cpe:2.3:o:redhat:linux:4.0:*:*:*:*:*:*:*4.0Running onRed Hat
cpe:2.3:o:ubuntu:ubuntu_linux:6.06_lts:*:amd64:*:*:*:*:*6.06_ltsRunning onUbuntu
cpe:2.3:o:ubuntu:ubuntu_linux:6.06_lts:*:i386:*:*:*:*:*6.06_ltsRunning onUbuntu
cpe:2.3:o:ubuntu:ubuntu_linux:6.06_lts:*:powerpc:*:*:*:*:*6.06_ltsRunning onUbuntu
cpe:2.3:o:ubuntu:ubuntu_linux:6.06_lts:*:sparc:*:*:*:*:*6.06_ltsRunning onUbuntu
cpe:2.3:o:ubuntu:ubuntu_linux:6.10:*:amd64:*:*:*:*:*6.10Running onUbuntu
cpe:2.3:o:ubuntu:ubuntu_linux:6.10:*:i386:*:*:*:*:*6.10Running onUbuntu
cpe:2.3:o:ubuntu:ubuntu_linux:6.10:*:powerpc:*:*:*:*:*6.10Running onUbuntu
cpe:2.3:o:ubuntu:ubuntu_linux:6.10:*:sparc:*:*:*:*:*6.10Running onUbuntu
cpe:2.3:o:ubuntu:ubuntu_linux:7.04:*:amd64:*:*:*:*:*7.04Running onUbuntu
cpe:2.3:o:ubuntu:ubuntu_linux:7.04:*:i386:*:*:*:*:*7.04Running onUbuntu
cpe:2.3:o:ubuntu:ubuntu_linux:7.04:*:powerpc:*:*:*:*:*7.04Running onUbuntu
cpe:2.3:o:ubuntu:ubuntu_linux:7.04:*:sparc:*:*:*:*:*7.04Running onUbuntu
cpe:2.3:a:trolltech:qt:3.0:*:*:*:*:*:*:*3.0VulnerableTrolltech
cpe:2.3:a:trolltech:qt:3.0.3:*:*:*:*:*:*:*3.0.3VulnerableTrolltech
cpe:2.3:a:trolltech:qt:3.0.5:*:*:*:*:*:*:*3.0.5VulnerableTrolltech
cpe:2.3:a:trolltech:qt:3.1:*:*:*:*:*:*:*3.1VulnerableTrolltech
cpe:2.3:a:trolltech:qt:3.1.1:*:*:*:*:*:*:*3.1.1VulnerableTrolltech
cpe:2.3:a:trolltech:qt:3.1.2:*:*:*:*:*:*:*3.1.2VulnerableTrolltech
cpe:2.3:a:trolltech:qt:3.2.1:*:*:*:*:*:*:*3.2.1VulnerableTrolltech
cpe:2.3:a:trolltech:qt:3.2.3:*:*:*:*:*:*:*3.2.3VulnerableTrolltech
cpe:2.3:a:trolltech:qt:3.3.0:*:*:*:*:*:*:*3.3.0VulnerableTrolltech
cpe:2.3:a:trolltech:qt:3.3.1:*:*:*:*:*:*:*3.3.1VulnerableTrolltech
cpe:2.3:a:trolltech:qt:3.3.2:*:*:*:*:*:*:*3.3.2VulnerableTrolltech
cpe:2.3:a:trolltech:qt:3.3.3:*:*:*:*:*:*:*3.3.3VulnerableTrolltech
cpe:2.3:a:trolltech:qt:3.3.4:*:*:*:*:*:*:*3.3.4VulnerableTrolltech
cpe:2.3:a:trolltech:qt:3.3.5:*:*:*:*:*:*:*3.3.5VulnerableTrolltech
cpe:2.3:a:trolltech:qt:3.3.6:*:*:*:*:*:*:*3.3.6VulnerableTrolltech
cpe:2.3:a:trolltech:qt:3.3.7:*:*:*:*:*:*:*3.3.7VulnerableTrolltech
cpe:2.3:a:trolltech:qt:3.3.8:*:*:*:*:*:*:*3.3.8VulnerableTrolltech
cpe:2.3:a:trolltech:qt:4.1:*:*:*:*:*:*:*4.1VulnerableTrolltech
cpe:2.3:a:trolltech:qt:4.1.4:*:*:*:*:*:*:*4.1.4VulnerableTrolltech
cpe:2.3:a:trolltech:qt:4.1.5:*:*:*:*:*:*:*4.1.5VulnerableTrolltech
cpe:2.3:a:trolltech:qt:4.2:*:*:*:*:*:*:*4.2VulnerableTrolltech
cpe:2.3:a:trolltech:qt:4.2.1:*:*:*:*:*:*:*4.2.1VulnerableTrolltech
cpe:2.3:a:trolltech:qt:4.2.3:*:*:*:*:*:*:*4.2.3VulnerableTrolltech
  • cpe:2.3:o:mandrakesoft:mandrake_linux:2007.1:*:x86_64:*:*:*:*:* Versions 2007.1 Running on ·Mandrakesoft
  • cpe:2.3:o:mandrakesoft:mandrake_linux_corporate_server:3.0:*:*:*:*:*:*:* Versions 3.0 Running on ·Mandrakesoft
  • cpe:2.3:o:mandrakesoft:mandrake_linux_corporate_server:3.0:*:x86_64:*:*:*:*:* Versions 3.0 Running on ·Mandrakesoft
  • cpe:2.3:o:mandrakesoft:mandrake_linux_corporate_server:4.0:*:*:*:*:*:*:* Versions 4.0 Running on ·Mandrakesoft
  • cpe:2.3:o:mandrakesoft:mandrake_linux_corporate_server:4.0:*:x86_64:*:*:*:*:* Versions 4.0 Running on ·Mandrakesoft
  • cpe:2.3:o:redhat:enterprise_linux:2.1:*:as:*:*:*:*:* Versions 2.1 Running on ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux:2.1:*:aw:*:*:*:*:* Versions 2.1 Running on ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux:2.1:*:es:*:*:*:*:* Versions 2.1 Running on ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux:3.0:*:as:*:*:*:*:* Versions 3.0 Running on ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux:3.0:*:es:*:*:*:*:* Versions 3.0 Running on ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux:3.0:*:ws:*:*:*:*:* Versions 3.0 Running on ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux:4.0:*:as:*:*:*:*:* Versions 4.0 Running on ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux:4.0:*:es:*:*:*:*:* Versions 4.0 Running on ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux:4.0:*:ws:*:*:*:*:* Versions 4.0 Running on ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux:5.0:*:client:*:*:*:*:* Versions 5.0 Running on ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux:5.0:*:client_workstation:*:*:*:*:* Versions 5.0 Running on ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux:5.0:*:server:*:*:*:*:* Versions 5.0 Running on ·Red Hat
  • cpe:2.3:o:redhat:linux:2.1:*:aw_itanium:*:*:*:*:* Versions 2.1 Running on ·Red Hat
  • cpe:2.3:o:redhat:linux:3.0:*:*:*:*:*:*:* Versions 3.0 Running on ·Red Hat
  • cpe:2.3:o:redhat:linux:4.0:*:*:*:*:*:*:* Versions 4.0 Running on ·Red Hat
  • cpe:2.3:o:ubuntu:ubuntu_linux:6.06_lts:*:amd64:*:*:*:*:* Versions 6.06_lts Running on ·Ubuntu
  • cpe:2.3:o:ubuntu:ubuntu_linux:6.06_lts:*:i386:*:*:*:*:* Versions 6.06_lts Running on ·Ubuntu
  • cpe:2.3:o:ubuntu:ubuntu_linux:6.06_lts:*:powerpc:*:*:*:*:* Versions 6.06_lts Running on ·Ubuntu
  • cpe:2.3:o:ubuntu:ubuntu_linux:6.06_lts:*:sparc:*:*:*:*:* Versions 6.06_lts Running on ·Ubuntu
  • cpe:2.3:o:ubuntu:ubuntu_linux:6.10:*:amd64:*:*:*:*:* Versions 6.10 Running on ·Ubuntu
  • cpe:2.3:o:ubuntu:ubuntu_linux:6.10:*:i386:*:*:*:*:* Versions 6.10 Running on ·Ubuntu
  • cpe:2.3:o:ubuntu:ubuntu_linux:6.10:*:powerpc:*:*:*:*:* Versions 6.10 Running on ·Ubuntu
  • cpe:2.3:o:ubuntu:ubuntu_linux:6.10:*:sparc:*:*:*:*:* Versions 6.10 Running on ·Ubuntu
  • cpe:2.3:o:ubuntu:ubuntu_linux:7.04:*:amd64:*:*:*:*:* Versions 7.04 Running on ·Ubuntu
  • cpe:2.3:o:ubuntu:ubuntu_linux:7.04:*:i386:*:*:*:*:* Versions 7.04 Running on ·Ubuntu
  • cpe:2.3:o:ubuntu:ubuntu_linux:7.04:*:powerpc:*:*:*:*:* Versions 7.04 Running on ·Ubuntu
  • cpe:2.3:o:ubuntu:ubuntu_linux:7.04:*:sparc:*:*:*:*:* Versions 7.04 Running on ·Ubuntu
  • cpe:2.3:a:trolltech:qt:3.0:*:*:*:*:*:*:* Versions 3.0 Vulnerable ·Trolltech
  • cpe:2.3:a:trolltech:qt:3.0.3:*:*:*:*:*:*:* Versions 3.0.3 Vulnerable ·Trolltech
  • cpe:2.3:a:trolltech:qt:3.0.5:*:*:*:*:*:*:* Versions 3.0.5 Vulnerable ·Trolltech
  • cpe:2.3:a:trolltech:qt:3.1:*:*:*:*:*:*:* Versions 3.1 Vulnerable ·Trolltech
  • cpe:2.3:a:trolltech:qt:3.1.1:*:*:*:*:*:*:* Versions 3.1.1 Vulnerable ·Trolltech
  • cpe:2.3:a:trolltech:qt:3.1.2:*:*:*:*:*:*:* Versions 3.1.2 Vulnerable ·Trolltech
  • cpe:2.3:a:trolltech:qt:3.2.1:*:*:*:*:*:*:* Versions 3.2.1 Vulnerable ·Trolltech
  • cpe:2.3:a:trolltech:qt:3.2.3:*:*:*:*:*:*:* Versions 3.2.3 Vulnerable ·Trolltech
  • cpe:2.3:a:trolltech:qt:3.3.0:*:*:*:*:*:*:* Versions 3.3.0 Vulnerable ·Trolltech
  • cpe:2.3:a:trolltech:qt:3.3.1:*:*:*:*:*:*:* Versions 3.3.1 Vulnerable ·Trolltech
  • cpe:2.3:a:trolltech:qt:3.3.2:*:*:*:*:*:*:* Versions 3.3.2 Vulnerable ·Trolltech
  • cpe:2.3:a:trolltech:qt:3.3.3:*:*:*:*:*:*:* Versions 3.3.3 Vulnerable ·Trolltech
  • cpe:2.3:a:trolltech:qt:3.3.4:*:*:*:*:*:*:* Versions 3.3.4 Vulnerable ·Trolltech
  • cpe:2.3:a:trolltech:qt:3.3.5:*:*:*:*:*:*:* Versions 3.3.5 Vulnerable ·Trolltech
  • cpe:2.3:a:trolltech:qt:3.3.6:*:*:*:*:*:*:* Versions 3.3.6 Vulnerable ·Trolltech
  • cpe:2.3:a:trolltech:qt:3.3.7:*:*:*:*:*:*:* Versions 3.3.7 Vulnerable ·Trolltech
  • cpe:2.3:a:trolltech:qt:3.3.8:*:*:*:*:*:*:* Versions 3.3.8 Vulnerable ·Trolltech
  • cpe:2.3:a:trolltech:qt:4.1:*:*:*:*:*:*:* Versions 4.1 Vulnerable ·Trolltech
  • cpe:2.3:a:trolltech:qt:4.1.4:*:*:*:*:*:*:* Versions 4.1.4 Vulnerable ·Trolltech
  • cpe:2.3:a:trolltech:qt:4.1.5:*:*:*:*:*:*:* Versions 4.1.5 Vulnerable ·Trolltech
  • cpe:2.3:a:trolltech:qt:4.2:*:*:*:*:*:*:* Versions 4.2 Vulnerable ·Trolltech
  • cpe:2.3:a:trolltech:qt:4.2.1:*:*:*:*:*:*:* Versions 4.2.1 Vulnerable ·Trolltech
  • cpe:2.3:a:trolltech:qt:4.2.3:*:*:*:*:*:*:* Versions 4.2.3 Vulnerable ·Trolltech

Remediation

Red Hat 1 advisory

  • RHSA-2007:0883 Released 2007-09-13 · Red Hat rating Important
    qt security update
    • Red Hat Desktop version 3 qt-1:3.1.2-17.RHEL3, qt-1:3.1.2-17.RHEL3.i386, qt-MySQL-1:3.1.2-17.RHEL3 +9
    • Red Hat Enterprise Linux (v. 5 server) qt-1:3.3.6-23.el5, qt-1:3.3.6-23.el5.i386, qt-1:3.3.6-23.el5.ia64 +29
    • Red Hat Enterprise Linux AS (Advanced Server) version 2.1 qt-1:2.3.1-14.EL2, qt-1:2.3.1-14.EL2.i386, qt-1:2.3.1-14.EL2.ia64 +8
    • Red Hat Enterprise Linux AS version 3 qt-1:3.1.2-17.RHEL3, qt-1:3.1.2-17.RHEL3.i386, qt-1:3.1.2-17.RHEL3.ia64 +21
    • Red Hat Enterprise Linux AS version 4 qt-1:3.3.3-13.RHEL4, qt-1:3.3.3-13.RHEL4.i386, qt-1:3.3.3-13.RHEL4.ia64 +25
    • Red Hat Enterprise Linux Desktop (v. 5 client) qt-1:3.3.6-23.el5, qt-1:3.3.6-23.el5.i386, qt-MySQL-1:3.3.6-23.el5 +7
    • Red Hat Enterprise Linux Desktop Workstation (v. 5 client) qt-1:3.3.6-23.el5, qt-designer-1:3.3.6-23.el5, qt-designer-1:3.3.6-23.el5.i386 +4
    • Red Hat Enterprise Linux Desktop version 4 qt-1:3.3.3-13.RHEL4, qt-1:3.3.3-13.RHEL4.i386, qt-MySQL-1:3.3.3-13.RHEL4 +11
    • Red Hat Enterprise Linux ES version 2.1 qt-1:2.3.1-14.EL2, qt-1:2.3.1-14.EL2.i386, qt-Xt-1:2.3.1-14.EL2.i386 +3
    • Red Hat Enterprise Linux ES version 3 qt-1:3.1.2-17.RHEL3, qt-1:3.1.2-17.RHEL3.i386, qt-1:3.1.2-17.RHEL3.ia64 +15
    • Red Hat Enterprise Linux ES version 4 qt-1:3.3.3-13.RHEL4, qt-1:3.3.3-13.RHEL4.i386, qt-1:3.3.3-13.RHEL4.ia64 +18
    • Red Hat Enterprise Linux WS version 2.1 qt-1:2.3.1-14.EL2, qt-1:2.3.1-14.EL2.i386, qt-Xt-1:2.3.1-14.EL2.i386 +3
    • Red Hat Enterprise Linux WS version 3 qt-1:3.1.2-17.RHEL3, qt-1:3.1.2-17.RHEL3.i386, qt-1:3.1.2-17.RHEL3.ia64 +15
    • Red Hat Enterprise Linux WS version 4 qt-1:3.3.3-13.RHEL4, qt-1:3.3.3-13.RHEL4.i386, qt-1:3.3.3-13.RHEL4.ia64 +18
    • Red Hat Linux Advanced Workstation 2.1 qt-1:2.3.1-14.EL2, qt-1:2.3.1-14.EL2.ia64, qt-Xt-1:2.3.1-14.EL2.ia64 +3

Vendor assessments

Red Hat

Red Hat rating: Important. Red Hat's page for this CVE →

ProductStatusPlan or fix
Red Hat Desktop version 3Fixed RHSA-2007:0883
Red Hat Enterprise Linux (v. 5 server)Fixed RHSA-2007:0883
Red Hat Enterprise Linux AS (Advanced Server) version 2.1 Fixed RHSA-2007:0883
Red Hat Enterprise Linux AS version 3Fixed RHSA-2007:0883
Red Hat Enterprise Linux AS version 4Fixed RHSA-2007:0883
Red Hat Enterprise Linux Desktop (v. 5 client)Fixed RHSA-2007:0883
Red Hat Enterprise Linux Desktop Workstation (v. 5 client)Fixed RHSA-2007:0883
Red Hat Enterprise Linux Desktop version 4Fixed RHSA-2007:0883
Red Hat Enterprise Linux ES version 2.1Fixed RHSA-2007:0883
Red Hat Enterprise Linux ES version 3Fixed RHSA-2007:0883
Red Hat Enterprise Linux ES version 4Fixed RHSA-2007:0883
Red Hat Enterprise Linux WS version 2.1Fixed RHSA-2007:0883
Red Hat Enterprise Linux WS version 3Fixed RHSA-2007:0883
Red Hat Enterprise Linux WS version 4Fixed RHSA-2007:0883
Red Hat Linux Advanced Workstation 2.1Fixed RHSA-2007:0883

Timeline

  1. 2026-10-02 Threatist record created from CVE-2007-4137
  2. 2026-10-03 Alias added: GHSA-4hrv-qfhv-9vh5

References

Advisory 9

Other 10

  • TI-2004-00632 Heap-based buffer overflow in the BMP image format parser for the QT library (qt3) before… CVSS 2.0HIGH 7.5
  • TI-2007-03283 Multiple format string vulnerabilities in (1) qtextedit.cpp, (2) qdatatable.cpp, (3)… CVSS 2.0MEDIUM 6.8
  • TI-2004-00633 The XPM parser in the QT library (qt3) before 3.3.3 allows remote attackers to cause a… CVSS 2.0MEDIUM 5.0
  • TI-2004-00634 The GIF parser in the QT library (qt3) before 3.3.3 allows remote attackers to cause a… CVSS 2.0MEDIUM 5.0
  • TI-2005-00577 Qt before 3.3.4 searches the BUILD_PREFIX directory, which could be world-writable, to… CVSS 2.0MEDIUM 4.6

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences