CVE-2007-4137 in Qtinfo

Summary

Off-by-one error in the QUtf8Decoder::toUnicode function in Trolltech Qt 3 allows context-dependent attackers to cause a denial of service (crash) via a crafted Unicode string that triggers a heap-based buffer overflow. NOTE: Qt 4 has the same error in the QUtf8Codec::convertToUnicode function, but it is not exploitable.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Reservation

08/02/2007

Disclosure

09/18/2007

CPE

ready

CVSS

7.3

EPSS

0.03550

Activities

Very Low

Sources

Might our Artificial Intelligence support you?

Check our Alexa App!