PT-2004-3710 · Qt · Libqt3-Odbc+3

Marcus Meissner · Published 1970-01-01 · Updated 2017-10-11 · CVE-2004-0693

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions qt versions prior to 3.3.3 libqt3-mysql versions (affected versions not specified) libqt3-odbc versions (affected versions not specified) qt3-tools versions (affected versions not specified)

Description The issue concerns multiple vulnerabilities in the qt library, which can lead to disruption of confidentiality, integrity, and availability of protected information. These vulnerabilities can be exploited remotely. A specific vulnerability in the GIF parser of the QT library allows remote attackers to cause a denial of service via a malformed image file, triggering a null dereference.

Recommendations For qt versions prior to 3.3.3, update to version 3.3.3 or later to resolve the issue. For libqt3-mysql, libqt3-odbc, and qt3-tools, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

BDU:2015-03098

BDU:2015-03099

BDU:2015-03100

BDU:2015-03101

BDU:2015-09458

CVE-2004-0693

DSA-542-1

RHSA-2004:414

Affected Products

Libqt3-Mysql

Libqt3-Odbc

Qt

Qt3-Tools

References · 18

• https://bdu.fstec.ru/vul/2015-03100 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0691 · Security Note
• https://bdu.fstec.ru/vul/2015-09458 · Security Note
• http://mandriva.com/security/advisories?name=MDKSA-2004:085 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0692 · Security Note
• https://bdu.fstec.ru/vul/2015-03099 · Security Note
• http://security.gentoo.org/glsa/glsa-200408-20.xml · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-03101 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2004-0693 · Security Note
• http://novell.com/linux/security/advisories/2004_27_qt3.html · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0693 · Security Note
• https://bdu.fstec.ru/vul/2015-03098 · Security Note
• http://debian.org/security/2004/dsa-542 · Vendor Advisory
• http://sunsolve.sun.com/search/document.do?assetkey=1-66-201610-1 · Vendor Advisory
• http://redhat.com/support/errata/RHSA-2004-414.html · Vendor Advisory