Approved changes feed: RSS · Atom

cpe:2.3:a:trolltech:qt:3.3.1:*:*:*:*:*:*:*

part: a version: 3.3.1 update: *

VendorTrolltech (27d5357f-bded-599d-b6d2-3d56aaf9ce4f)
ProductQt (bb5a46cb-fec9-526e-b38f-4e8475eb9913)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/ramons03/qt-creator purl2cpe 2026-06-01 10:11:30.258601

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2007-4137 vulnerable 2026-06-08 04:49:55.797804 Details available
Off-by-one error in the QUtf8Decoder::toUnicode function in Trolltech Qt 3 allows context-dependent attackers to cause a denial of service (crash) via a crafted Unicode string that triggers a heap-based buffer overflow. NOTE: Qt 4 has the same error in the QUtf8Codec::convertToUnicode function, but it is not exploitable.
Published: 2007-09-18T19:00:00.000Z
Updated: 2024-08-07T14:46:38.696Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-0627 vulnerable 2026-06-08 04:48:13.196847 Details available
Qt before 3.3.4 searches the BUILD_PREFIX directory, which could be world-writable, to load shared libraries regardless of the LD_LIBRARY_PATH environment variable, which allows local users to execute arbitrary programs.
Published: 2005-03-04T05:00:00.000Z
Updated: 2024-08-07T21:21:06.462Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.