PT-2002-2605 · Trolltech · Trolltech Qt+1

Publicado 2002-12-31 · Atualizado 2008-09-05 · CVE-2002-1883

Positive Technologies (AI Summary)

CVSS v2.0

6.4

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:P

Name of the Vulnerable Software and Affected Versions Trolltech Qt versions 3.0.3

Description The issue allows remote attackers to open arbitrary HTML pages and cause a denial of service. This occurs when Trolltech Qt Assistant 1.0 in Trolltech Qt 3.0.3 is loaded from the Designer, and it opens port 7358 for interprocess communication.

Recommendations For Trolltech Qt version 3.0.3, consider restricting access to port 7358 to minimize the risk of exploitation. As a temporary workaround, avoid loading Trolltech Qt Assistant 1.0 from the Designer until a patch is available.

Correção

Identificadores relacionados

CVE-2002-1883

Produtos afetados

Trolltech Qt

Trolltech Qt Assistant

Referências · 5

• http://online.securityfocus.com/archive/1/293556 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2002-1883 · Nota de Segurança
• http://iss.net/security_center/static/10227.php · Correção
• http://lists.trolltech.com/qt-interest/2002-09/thread00549-0.html · Aviso do Fabricante
• http://securityfocus.com/bid/5833 · Nota