PT-2010-4150 · Qt Company · Qt

Luigi Auriemma · Published 2010-07-02 · Updated 2021-06-16 · CVE-2010-2621

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Qt versions prior to 4.6.3

Description The issue allows remote attackers to cause a denial of service, resulting in an infinite loop, via a malformed request. This is due to a problem in the QSslSocketBackendPrivate::transmit function.

Recommendations For Qt versions prior to 4.6.3, update to a version newer than 4.6.3 to resolve the issue.

Exploit

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2010-2621

Affected Products

Qt

References · 12

• 🔥 https://exploit-db.com/exploits/14268 · Exploit
• 🔥 http://aluigi.org/poc/qtsslame.zip · Exploit
• 🔥 http://securityfocus.com/bid/41250 · Exploit
• http://vupen.com/english/advisories/2010/1657 · Vendor Advisory
• http://secunia.com/advisories/40389 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2010-2621 · Security Note
• http://secunia.com/advisories/46410 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2010-2621 · Vendor Advisory
• https://hermes.opensuse.org/messages/12056605 · Vendor Advisory
• http://qt.gitorious.org/qt/qt/commit/c25c7c9bdfade6b906f37ac8bad44f6f0de57597 · Note
• http://osvdb.org/65860 · Note
• http://aluigi.org/adv/qtsslame-adv.txt · Note