PT-2004-3709 · Qt · Libqt3-Odbc+3

Published 1970-01-01 · Updated 2017-10-11 · CVE-2004-0692

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions qt versions prior to 3.3.3 libqt3-mysql versions (affected versions not specified) libqt3-odbc versions (affected versions not specified) qt3-tools versions (affected versions not specified)

Description The issue concerns multiple vulnerabilities in the qt package and its related components, which can lead to a disruption of confidentiality, integrity, and availability of protected information. These vulnerabilities can be exploited remotely. The XPM parser in the QT library is specifically vulnerable to a denial of service attack via a malformed image file, causing a null dereference and application crash.

Recommendations For qt versions prior to 3.3.3, update to version 3.3.3 or later to resolve the issue. For libqt3-mysql, libqt3-odbc, and qt3-tools, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

BDU:2015-03098

BDU:2015-03099

BDU:2015-03100

BDU:2015-03101

BDU:2015-09458

CVE-2004-0692

DSA-542-1

RHSA-2004:414

RHSA-2004:478

Affected Products

Libqt3-Mysql

Libqt3-Odbc

Qt

Qt3-Tools

References · 19

• https://bdu.fstec.ru/vul/2015-03100 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0691 · Security Note
• https://bdu.fstec.ru/vul/2015-09458 · Security Note
• http://mandriva.com/security/advisories?name=MDKSA-2004:085 · Vendor Advisory
• http://marc.info/?l=bugtraq&m=110979666528890&w=2 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0692 · Security Note
• https://bdu.fstec.ru/vul/2015-03099 · Security Note
• http://security.gentoo.org/glsa/glsa-200408-20.xml · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-03101 · Security Note
• http://novell.com/linux/security/advisories/2004_27_qt3.html · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0693 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2004-0692 · Security Note
• http://debian.org/security/2004/dsa-542 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-03098 · Security Note
• http://sunsolve.sun.com/search/document.do?assetkey=1-66-201610-1 · Vendor Advisory