package-update

karasz

History

Aldas Nabazas 7c924dc951 Updated qt3 (3.3.8 -> 3.3.8b) : SECURITY - HIGH CVE-2007-3388 (Medium) : Multiple format string vulnerabilities in (1) qtextedit.cpp, (2) qdatatable.cpp, (3) qsqldatabase.cpp, (4) qsqlindex.cpp, (5) qsqlrecord.cpp, (6) qglobal.cpp, and (7) qsvgdevice.cpp in QTextEdit in Trolltech Qt 3 before 3.3.8 20070727 allow remote attackers to execute arbitrary code via format string specifiers in text used to compose an error message. CVE-2007-4137 (High) : Off-by-one error in the QUtf8Decoder::toUnicode function in Trolltech Qt 3 allows context-dependent attackers to cause a denial of service (crash) via a crafted Unicode string that triggers a heap-based buffer overflow. NOTE: Qt 4 has the same error in the QUtf8Codec::convertToUnicode function, but it is not exploitable.	17 years ago
..
qt3	Updated qt3 (3.3.8 -> 3.3.8b) : SECURITY - HIGH	17 years ago
qt4	Removed trailing spaces massively, hoping to not break anything. Copyright notes not renewed	17 years ago

Aldas Nabazas 7c924dc951 Updated qt3 (3.3.8 -> 3.3.8b) : SECURITY - HIGH

CVE-2007-3388 (Medium) :
Multiple format string vulnerabilities in (1) qtextedit.cpp, (2) qdatatable.cpp, (3)
qsqldatabase.cpp, (4) qsqlindex.cpp, (5) qsqlrecord.cpp, (6) qglobal.cpp, and (7)
qsvgdevice.cpp in QTextEdit in Trolltech Qt 3 before 3.3.8 20070727 allow remote attackers to
execute arbitrary code via format string specifiers in text used to compose an error message.

CVE-2007-4137 (High) :
Off-by-one error in the QUtf8Decoder::toUnicode function in Trolltech Qt 3 allows
context-dependent attackers to cause a denial of service (crash) via a crafted Unicode string
that triggers a heap-based buffer overflow. NOTE: Qt 4 has the same error in the
QUtf8Codec::convertToUnicode function, but it is not exploitable.

17 years ago

qt3

Updated qt3 (3.3.8 -> 3.3.8b) : SECURITY - HIGH

17 years ago

qt4

Removed trailing spaces massively, hoping to not break anything. Copyright notes not renewed

17 years ago