Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
debiancveDebian Security Bug TrackerDEBIANCVE:CVE-2007-4137
HistorySep 18, 2007 - 7:17 p.m.

CVE-2007-4137

2007-09-1819:17:00
Debian Security Bug Tracker
security-tracker.debian.org
19

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

6.2 Medium

AI Score

Confidence

Low

0.016 Low

EPSS

Percentile

87.4%

JSON

Off-by-one error in the QUtf8Decoder::toUnicode function in Trolltech Qt 3 allows context-dependent attackers to cause a denial of service (crash) via a crafted Unicode string that triggers a heap-based buffer overflow. NOTE: Qt 4 has the same error in the QUtf8Codec::convertToUnicode function, but it is not exploitable.

OSVersionArchitecturePackageVersionFilename
Debian10allqt4-x11< 4:4.8.7+dfsg-18+deb10u1qt4-x11_4:4.8.7+dfsg-18+deb10u1_all.deb

Related

prion 1
ubuntucve 1
cvelist 1
nessus 13
cve 1
openvas 15
nvd 1
securityvulns 2
veracode 1
ubuntu 1
gentoo 1
centos 2
debian 1
redhat 1
osv 1
oraclelinux 1
fedora 2
prion
prion
Heap overflow
2007-09-18 19:17:00
ubuntucve
ubuntucve
CVE-2007-4137
2007-09-18 00:00:00
cvelist
cvelist
CVE-2007-4137
2007-09-18 19:00:00
nessus
nessus
Ubuntu 6.06 LTS / 6.10 / 7.04 : qt-x11-free vulnerability (USN-513-1)
2007-11-10 00:00:00
SuSE 10 Security Update : qt3 (ZYPP Patch Number 4420)
2007-12-13 00:00:00
openSUSE 10 Security Update : qt3 (qt3-4421)
2007-10-17 00:00:00
cve
cve
CVE-2007-4137
2007-09-18 19:17:00
openvas
openvas
Gentoo Security Advisory GLSA 200710-28 (qt)
2008-09-24 00:00:00
Mandriva Update for qt MDKSA-2007:183 (qt)
2009-04-09 00:00:00
Ubuntu Update for qt-x11-free vulnerability USN-513-1
2009-03-23 00:00:00
nvd
nvd
CVE-2007-4137
2007-09-18 19:17:00
securityvulns
securityvulns
Qt library buffer overflow
2007-09-14 00:00:00
[Full-disclosure] [ MDKSA-2007:183 ] - Updated qt3/qt4 packages fix vulnerability
2007-09-14 00:00:00
veracode
veracode
Arbitrary Code Execution
2020-04-10 00:17:41
ubuntu
ubuntu
Qt vulnerability
2007-09-18 00:00:00
gentoo
gentoo
Qt: Buffer overflow
2007-10-25 00:00:00
centos
centos
qt security update
2007-09-14 01:30:43
qt security update
2007-09-13 18:50:19
debian
debian
[SECURITY] [DSA 1426-1] New qt-x11-free packages fix several vulnerabilities
2007-12-08 11:54:32
redhat
redhat
(RHSA-2007:0883) Important: qt security update
2007-09-13 00:00:00
osv
osv
qt-x11-free - several vulnerabilities
2007-12-08 00:00:00
oraclelinux
oraclelinux
Important: qt security update
2007-09-13 00:00:00
fedora
fedora
[SECURITY] Fedora 7 Update: qt-3.3.8-7.fc7
2007-09-19 02:53:35
[SECURITY] Fedora Core 6 Update: qt-3.3.8-2.fc6
2007-09-18 22:38:37

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

6.2 Medium

AI Score

Confidence

Low

0.016 Low

EPSS

Percentile

87.4%

JSON
Related for DEBIANCVE:CVE-2007-4137
prion1ubuntucve1cvelist1nessus13cve1openvas15nvd1securityvulns2veracode1ubuntu1gentoo1centos2debian1redhat1osv1oraclelinux1fedora2