CVE-2007-3388 Multiple format string vulnerabilities in (1) qtextedit.cpp, (2) qdatatable.cpp, (3) qsqldatabase.cpp, (4) qsqlindex.cpp, (5) qsqlrecord.cpp, (6) qglobal.cpp, and (7) qsvgdevice.cpp in QTextEdit in Tr...
MediumCVSS 6.8
EPSS 4.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple format string vulnerabilities in (1) qtextedit.cpp, (2) qdatatable.cpp, (3) qsqldatabase.cpp, (4) qsqlindex.cpp, (5) qsqlrecord.cpp, (6) qglobal.cpp, and (7) qsvgdevice.cpp in QTextEdit in Trolltech Qt 3 before 3.3.8 20070727 allow remote attackers to execute arbitrary code via format string specifiers in text used to compose an error message.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| trolltech qt | <= 3.3.7 | No fix listed |
References
- bugs.gentoo.org
- dist.trolltech.com
- FEDORA-2007-2216 vendor-advisory
- FEDORA-2007-703 vendor-advisory
- 24460 third-party-advisory
- 26264 third-party-advisory
- 26284 third-party-advisory
- 26291 third-party-advisory
- 26295 third-party-advisory vendor-advisory
- 26298 patch third-party-advisory
- 26306 third-party-advisory
- 26385 third-party-advisory
- 26607 third-party-advisory
- 26804 third-party-advisory
- 26852 third-party-advisory
- 26882 third-party-advisory
- 27996 third-party-advisory
- 28021 third-party-advisory
- GLSA-200712-08 vendor-advisory
- 1018485 patch vdb-entry
- support.avaya.com
- trolltech.com patch
- DSA-1426 vendor-advisory
- GLSA-200708-16 vendor-advisory
- GLSA-200710-28 vendor-advisory
- MDKSA-2007:151 vendor-advisory
- SUSE-SA:2007:048 vendor-advisory
- RHSA-2007:0721 vendor-advisory
- 20070803 FLEA-2007-0042-1 qt mailing-list
- 25154 patch vdb-entry
- SSA:2007-222-03 vendor-advisory
- USN-495-1 vendor-advisory
- ADV-2007-2733 vdb-entry
- issues.rpath.com
- oval:org.mitre.oval:def:9690 signature vdb-entry