PT-2002-2605 · Trolltech · Trolltech Qt+1

Published 2002-12-31 · Updated 2008-09-05 · CVE-2002-1883

Positive Technologies (AI Summary)

CVSS v2.0

6.4

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:P

Name of the Vulnerable Software and Affected Versions Trolltech Qt versions 3.0.3

Description The issue allows remote attackers to open arbitrary HTML pages and cause a denial of service. This occurs when Trolltech Qt Assistant 1.0 in Trolltech Qt 3.0.3 is loaded from the Designer, and it opens port 7358 for interprocess communication.

Recommendations For Trolltech Qt version 3.0.3, consider restricting access to port 7358 to minimize the risk of exploitation. As a temporary workaround, avoid loading Trolltech Qt Assistant 1.0 from the Designer until a patch is available.

Fix

Related Identifiers

CVE-2002-1883

Affected Products

Trolltech Qt

Trolltech Qt Assistant

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2002-1883 · Security Note
• http://iss.net/security_center/static/10227.php · Patch
• http://lists.trolltech.com/qt-interest/2002-09/thread00549-0.html · Vendor Advisory
• http://online.securityfocus.com/archive/1/293556 · Note
• http://securityfocus.com/bid/5833 · Note