CVE-2007-4137 Off-by-one error in the QUtf8Decoder::toUnicode function in Trolltech Qt 3 allows context-dependent attackers to cause a denial of service (crash) via a crafted Unicode string that triggers a heap-bas...
HighCVSS 7.5
EPSS 2.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Off-by-one error in the QUtf8Decoder::toUnicode function in Trolltech Qt 3 allows context-dependent attackers to cause a denial of service (crash) via a crafted Unicode string that triggers a heap-based buffer overflow. NOTE: Qt 4 has the same error in the QUtf8Codec::convertToUnicode function, but it is not exploitable.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| trolltech qt | = 3.0 | No fix listed |
| trolltech qt | = 3.0.3 | No fix listed |
| trolltech qt | = 3.0.5 | No fix listed |
| trolltech qt | = 3.1 | No fix listed |
| trolltech qt | = 3.1.1 | No fix listed |
| trolltech qt | = 3.1.2 | No fix listed |
| trolltech qt | = 3.2.1 | No fix listed |
| trolltech qt | = 3.2.3 | No fix listed |
| trolltech qt | = 3.3.0 | No fix listed |
| trolltech qt | = 3.3.1 | No fix listed |
| trolltech qt | = 3.3.2 | No fix listed |
| trolltech qt | = 3.3.3 | No fix listed |
| trolltech qt | = 3.3.4 | No fix listed |
| trolltech qt | = 3.3.5 | No fix listed |
| trolltech qt | = 3.3.6 | No fix listed |
| trolltech qt | = 3.3.7 | No fix listed |
| trolltech qt | = 3.3.8 | No fix listed |
| trolltech qt | = 4.1 | No fix listed |
| trolltech qt | = 4.1.4 | No fix listed |
| trolltech qt | = 4.1.5 | No fix listed |
| trolltech qt | = 4.2 | No fix listed |
| trolltech qt | = 4.2.1 | No fix listed |
| trolltech qt | = 4.2.3 | No fix listed |
References
- bugs.gentoo.org
- dist.trolltech.com
- dist.trolltech.com
- FEDORA-2007-2216 vendor-advisory
- FEDORA-2007-703 vendor-advisory
- 39384 vdb-entry
- 26778 third-party-advisory vendor-advisory
- 26782 third-party-advisory vendor-advisory
- 26804 third-party-advisory
- 26811 third-party-advisory vendor-advisory
- 26857 third-party-advisory
- 26868 third-party-advisory
- 26882 third-party-advisory
- 26987 third-party-advisory
- 27053 third-party-advisory
- 27275 third-party-advisory
- 27382 third-party-advisory
- 27996 third-party-advisory
- 28021 third-party-advisory
- GLSA-200710-28 vendor-advisory
- GLSA-200712-08 vendor-advisory
- 1018688 vdb-entry
- support.avaya.com
- trolltech.com
- DSA-1426 vendor-advisory
- MDKSA-2007:183 vendor-advisory
- SUSE-SR:2007:019 vendor-advisory
- RHSA-2007:0883 vendor-advisory
- 20071004 FLEA-2007-0059-1 qt qt-tools mailing-list
- 25657 vdb-entry
- USN-513-1 vendor-advisory
- ADV-2007-3144 vdb-entry
- bugzilla.redhat.com
- issues.rpath.com
- oval:org.mitre.oval:def:11159 signature vdb-entry