CVE-2007-3388

Impact:
Important
Public Date:
2007-07-27
Bugzilla:
248417: CVE-2007-3388 qt3 format string flaw

The MITRE CVE dictionary describes this issue as:

Multiple format string vulnerabilities in (1) qtextedit.cpp, (2) qdatatable.cpp, (3) qsqldatabase.cpp, (4) qsqlindex.cpp, (5) qsqlrecord.cpp, (6) qglobal.cpp, and (7) qsvgdevice.cpp in QTextEdit in Trolltech Qt 3 before 3.3.8 20070727 allow remote attackers to execute arbitrary code via format string specifiers in text used to compose an error message.

Find out more about CVE-2007-3388 from the MITRE CVE dictionary dictionary and NIST NVD.

Red Hat Security Errata

Platform Errata Release Date
Red Hat Enterprise Linux 5 (qt) RHSA-2007:0721 2007-07-31
Red Hat Enterprise Linux 3 (qt) RHSA-2007:0721 2007-07-31
Red Hat Enterprise Linux 4 (qt) RHSA-2007:0721 2007-07-31

Acknowledgements

Red Hat would like to acknowledge Tim Brown of Portcullis Computer Security and Dirk Mueller for these issues.

Last Modified

CVE description copyright © 2017, The MITRE Corporation

Close

Welcome! Check out the Getting Started with Red Hat page for quick tours and guides for common tasks.