PT-2010-4150 · Qt Company · Qt

Luigi Auriemma · Publicado 2010-07-02 · Atualizado 2021-06-16 · CVE-2010-2621

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Qt versions prior to 4.6.3

Description The issue allows remote attackers to cause a denial of service, resulting in an infinite loop, via a malformed request. This is due to a problem in the QSslSocketBackendPrivate::transmit function.

Recommendations For Qt versions prior to 4.6.3, update to a version newer than 4.6.3 to resolve the issue.

Exploit

Correção

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2010-2621

Produtos afetados

Qt

Referências · 12

• 🔥 https://exploit-db.com/exploits/14268 · Exploit
• 🔥 http://aluigi.org/poc/qtsslame.zip · Exploit
• 🔥 http://securityfocus.com/bid/41250 · Exploit
• http://qt.gitorious.org/qt/qt/commit/c25c7c9bdfade6b906f37ac8bad44f6f0de57597 · Nota
• http://vupen.com/english/advisories/2010/1657 · Aviso do Fabricante
• http://secunia.com/advisories/40389 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2010-2621 · Nota de Segurança
• http://secunia.com/advisories/46410 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2010-2621 · Aviso do Fabricante
• https://hermes.opensuse.org/messages/12056605 · Aviso do Fabricante
• http://osvdb.org/65860 · Nota
• http://aluigi.org/adv/qtsslame-adv.txt · Nota