Oracle Linux 3 / 4 / 5 : qt (ELSA-2007-0883)

high Nessus Plugin ID 67568

Language:

Synopsis

The remote Oracle Linux host is missing one or more security updates.

Description

From Red Hat Security Advisory 2007:0883 :

Updated qt packages that correct two security flaws are now available.

This update has been rated as having important security impact by the Red Hat Security Response Team.

Qt is a software toolkit that simplifies the task of writing and maintaining GUI (Graphical User Interface) applications for the X Window System.

A flaw was found in the way Qt expanded certain UTF8 characters. It was possible to prevent a Qt-based application from properly sanitizing user-supplied input. This could, for example, result in a cross-site scripting attack against the Konqueror web browser.
(CVE-2007-0242)

A buffer overflow flaw was found in the way Qt expanded malformed Unicode strings. If an application linked against Qt parsed a malicious Unicode string, it could lead to a denial of service or possibly allow the execution of arbitrary code. (CVE-2007-4137)

Users of Qt should upgrade to these updated packages, which contain a backported patch to correct these issues.

Solution

Update the affected qt packages.

Plugin Details

Severity: High

ID: 67568

File Name: oraclelinux_ELSA-2007-0883.nasl

Version: 1.12

Type: local

Agent: unix

Family: Oracle Linux Local Security Checks

Published: 7/12/2013

Updated: 1/14/2021

Supported Sensors: Frictionless Assessment Agent, Nessus Agent, Nessus

Risk Information

VPR

Risk Factor: Medium

Score: 4.7

CVSS v2

Risk Factor: High

Base Score: 7.5

Temporal Score: 5.5

Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P

Vulnerability Information

CPE: cpe:/o:oracle:linux:4, cpe:/o:oracle:linux:5, p-cpe:/a:oracle:linux:qt, p-cpe:/a:oracle:linux:qt-mysql, p-cpe:/a:oracle:linux:qt-odbc, p-cpe:/a:oracle:linux:qt-postgresql, p-cpe:/a:oracle:linux:qt-config, p-cpe:/a:oracle:linux:qt-designer, p-cpe:/a:oracle:linux:qt-devel, p-cpe:/a:oracle:linux:qt-devel-docs, cpe:/o:oracle:linux:3

Required KB Items: Host/local_checks_enabled, Host/OracleLinux, Host/RedHat/release, Host/RedHat/rpm-list

Exploit Ease: No known exploits are available

Patch Publication Date: 9/13/2007

Vulnerability Publication Date: 4/3/2007

Reference Information

CVE: CVE-2007-0242, CVE-2007-4137

BID: 23269, 25657

CWE: 119

RHSA: 2007:0883

Detections

Analytics