Vulnerability   
Search   
    Search 219043 CVE descriptions
and 99761 test descriptions,
access 10,000+ cross references.
Tests   CVE   All  

Test ID:1.3.6.1.4.1.25623.1.0.52894
Category:Turbolinux Local Security Tests
Title:Turbolinux TLSA-2004-21 (qt)
Summary:NOSUMMARY
Description:Description:

The remote host is missing an update to qt
announced via advisory TLSA-2004-21.

Qt is a complete, well-designed, multi-platform object-oriented framework for
developing graphical user interface (GUI) applications in C++. Qt has seamless
integration with the OpenGL/Mesa 3D libraries.
The GIF and XML parser in the Qt library is susceptible to a remote denial
of service attack via a null pointer dereference triggered by malformed GIF/XML
file input.

This may allow remote attackers to to cause a denial of service via malformed GIF and XML file.

Solution: Please use the turbopkg (zabom) tool to apply the update.
http://www.securityspace.com/smysecure/catid.html?in=TLSA-2004-21

Risk factor : High

CVSS Score:
7.5

Cross-Ref: Common Vulnerability Exposure (CVE) ID: CVE-2004-0691
Bugtraq: 20040818 CESA-2004-004: qt (Google Search)
http://marc.info/?l=bugtraq&m=109295309008309&w=2
Debian Security Information: DSA-542 (Google Search)
http://www.debian.org/security/2004/dsa-542
http://security.gentoo.org/glsa/glsa-200408-20.xml
http://www.mandriva.com/security/advisories?name=MDKSA-2004:085
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9485
http://www.redhat.com/support/errata/RHSA-2004-414.html
http://sunsolve.sun.com/search/document.do?assetkey=1-66-201610-1
SuSE Security Announcement: SUSE-SA:2004:027 (Google Search)
http://www.novell.com/linux/security/advisories/2004_27_qt3.html
XForce ISS Database: qt-bmp-bo(17040)
https://exchange.xforce.ibmcloud.com/vulnerabilities/17040
Common Vulnerability Exposure (CVE) ID: CVE-2004-0692
http://marc.info/?l=bugtraq&m=110979666528890&w=2
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10327
XForce ISS Database: qt-xpm-dos(17041)
https://exchange.xforce.ibmcloud.com/vulnerabilities/17041
Common Vulnerability Exposure (CVE) ID: CVE-2004-0693
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10883
XForce ISS Database: qt-gif-dos(17042)
https://exchange.xforce.ibmcloud.com/vulnerabilities/17042
CopyrightCopyright (c) 2005 E-Soft Inc. http://www.securityspace.com

This is only one of 99761 vulnerability tests in our test suite. Find out more about running a complete security audit.

To run a free test of this vulnerability against your system, register below.




© 1998-2024 E-Soft Inc. All rights reserved.