GCVE - cpe:2.3:a:qt:qt:3.3.5:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:qt:qt:3.3.5:*:*:*:*:*:*:*

part: a version: 3.3.5 update: *

Vendor	Qt (`ac351d54-6a3a-5b90-a60b-6ef58ef23803`)
Product	Qt (`fb46f139-0d7d-5cf6-a2f2-b5bc72f4c130`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
`pkg:deb/debian/qtbase5-dev`	purl2cpe	2026-06-01 10:16:55.734368
`pkg:deb/ubuntu/qtbase5-dev`	purl2cpe	2026-06-01 10:16:55.734370
`pkg:github/qt/qt`	purl2cpe	2026-06-01 10:16:55.734371
`pkg:github/qt/qt5`	purl2cpe	2026-06-01 10:16:55.734373
`pkg:qt/qt`	purl2cpe	2026-06-01 10:16:55.734374
`pkg:rpm/fedora/qt5-qtbase`	purl2cpe	2026-06-01 10:16:55.734376
`pkg:rpm/opensuse/qt5-qtbase`	purl2cpe	2026-06-01 10:16:55.734377

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2013-0254`	vulnerable	2026-06-08 05:03:46.494709	Details available The QSharedMemory class in Qt 5.0.0, 4.8.x before 4.8.5, 4.7.x before 4.7.6, and other versions including 4.4.0 uses weak permissions (world-readable and world-writable) for shared memory segments, which allows local users to read sensitive information or modify critical program data, as demonstrated by reading a pixmap being sent to an X server. Published: 2013-02-06T11:00:00.000Z Updated: 2024-08-06T14:18:09.656Z Open on db.gcve.eu Reference links http://lists.opensuse.org/opensuse-updates/2013-03/msg00015.html http://rhn.redhat.com/errata/RHSA-2013-0669.html http://lists.opensuse.org/opensuse-updates/2013-03/msg00014.html http://lists.qt-project.org/pipermail/announce/2013-February/000023.html http://lists.opensuse.org/opensuse-updates/2013-03/msg00019.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-5624`	vulnerable	2026-06-08 05:02:57.576166	Details available The XMLHttpRequest object in Qt before 4.8.4 enables http redirection to the file scheme, which allows man-in-the-middle attackers to force the read of arbitrary local files and possibly obtain sensitive information via a file: URL to a QML application. Published: 2013-02-24T19:00:00.000Z Updated: 2024-09-16T18:45:23.183Z Open on db.gcve.eu Reference links http://lists.opensuse.org/opensuse-updates/2013-01/msg00048.html http://www.ubuntu.com/usn/USN-1723-1 http://secunia.com/advisories/52217 http://qt.gitorious.org/qt/qt/commit/96311def2466dd44de64d77a1c815b22fbf68f71 http://www.openwall.com/lists/oss-security/2012/12/04/8	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-4811`	vulnerable	2026-06-08 04:49:18.869573	Details available Integer overflow in Qt 3.3 before 3.3.7, 4.1 before 4.1.5, and 4.2 before 4.2.1, as used in the KDE khtml library, kdelibs 3.1.3, and possibly other packages, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted pixmap image. Published: 2006-10-18T17:00:00.000Z Updated: 2024-08-07T19:23:41.159Z Open on db.gcve.eu Reference links http://securitytracker.com/id?1017084 http://www.redhat.com/support/errata/RHSA-2006-0725.html http://secunia.com/advisories/22738 http://secunia.com/advisories/22485 http://secunia.com/advisories/22586	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.