NVD

Id
52470  
Name
CVE-2007-0242  
Description
The UTF-8 decoder in codecs/qutfcodec.cpp in Qt 3.3.8 and 4.2.3 does not reject long UTF-8 sequences as required by the standard, which allows remote attackers to conduct cross-site scripting (XSS) and directory traversal attacks via long sequences that decode to dangerous metacharacters.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-07  
Published
2007-04-03  
Modified Date
2012-06-18  
Seq
2007-0242  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
265111 52470 CVE-2007-0242 20070901-01-P  View
265112 52470 CVE-2007-0242 FEDORA-2007-703  View
265113 52470 CVE-2007-0242 oval:org.mitre.oval:def:11510  View
265114 52470 CVE-2007-0242 RHSA-2011:1324  View
265115 52470 CVE-2007-0242 SSA:2007-093-03  View
265116 52470 CVE-2007-0242 http://support.avaya.com/elmodocs2/security/ASA-2007-424.htm  View
265117 52470 CVE-2007-0242 http://support.novell.com/techcenter/psdb/39ea4b325a7da742cb8b6995fa585b14.html  View
265118 52470 CVE-2007-0242 http://support.novell.com/techcenter/psdb/fc79b7f48d739f9c803a24ddad933384.html  View
265119 52470 CVE-2007-0242 DSA-1292  View
265120 52470 CVE-2007-0242 MDKSA-2007:074  View
265121 52470 CVE-2007-0242 MDKSA-2007:075  View
265122 52470 CVE-2007-0242 MDKSA-2007:076  View
265123 52470 CVE-2007-0242 http://www.nabble.com/Bug-417390:-CVE-2007-0242,--Qt-UTF-8-overlong-sequence-decoding-vulnerability-t3506065.html  View
265124 52470 CVE-2007-0242 SUSE-SR:2007:006  View
265125 52470 CVE-2007-0242 RHSA-2007:0883  View
265126 52470 CVE-2007-0242 RHSA-2007:0909  View
265127 52470 CVE-2007-0242 23269  View
265128 52470 CVE-2007-0242 http://www.trolltech.com/company/newsroom/announcements/press.2007-03-30.9172215350  View
265129 52470 CVE-2007-0242 USN-452-1  View
265130 52470 CVE-2007-0242 ADV-2007-1212  View
265131 52470 CVE-2007-0242 qt-utf8-xss(33397)  View
265132 52470 CVE-2007-0242 https://issues.rpath.com/browse/RPL-1202  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
51746 JVNDB-2007-000409 Qt の UTF-8 デコーダーにおけるクロスサイトスクリプティングおよびディレクトリトラバーサルの脆弱性 Qt の UTF-8 デコーダーは、UTF-8 標準で要求された過度に長い UTF-8 文字列を適切に処理しない問題があります。そのため、第三者にメタ文字をデコードした長い文字列を通して、クロスサイトスクリプティングおよびディレクトリトラバーサルの攻撃を受ける可能性があります。 CVE-2007-0242 23597 CVE-2007-0242 52470 4.3 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-000409.html 2007-04-03 2011-11-17 View