Qt vulnerability

2007-08-0300:00:00

ubuntu.com

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

7.4

Confidence

Low

EPSS

0.142

Percentile

95.8%

JSON

Releases

Ubuntu 7.04
Ubuntu 6.10
Ubuntu 6.06

Details

Several format string vulnerabilities have been discovered in Qt
warning messages. By causing an application to process specially
crafted input data which triggered Qt warnings, this could be
exploited to execute arbitrary code with the privilege of the user
running the application.

OSVersionArchitecturePackageVersionFilename
Ubuntu7.04noarchlibqt3-mt< 3:3.3.8really3.3.7-0ubuntu5.1UNKNOWN
Ubuntu6.10noarchlibqt3-mt< 3:3.3.6-3ubuntu3.2UNKNOWN
Ubuntu6.06noarchlibqt3-mt< 3:3.3.6-1ubuntu6.3UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Ubuntu	7.04	noarch	libqt3-mt	< 3:3.3.8really3.3.7-0ubuntu5.1	UNKNOWN
Ubuntu	6.10	noarch	libqt3-mt	< 3:3.3.6-3ubuntu3.2	UNKNOWN
Ubuntu	6.06	noarch	libqt3-mt	< 3:3.3.6-1ubuntu6.3	UNKNOWN