Every CVE Search/ Get API key

CVE-2007-4137

Off-by-one error in the QUtf8Decoder::toUnicode function in Trolltech Qt 3 allows context...

7.5 HighFix available

Off-by-one error in the QUtf8Decoder::toUnicode function in Trolltech Qt 3 allows context-dependent attackers to cause a denial of service (crash) via a crafted Unicode string that triggers a heap-based buffer overflow. NOTE: Qt 4 has the same error in the QUtf8Codec::convertToUnicode function, but it is not exploitable.

Exploit likelihood

2.34%Down 0.3 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 7.5

Off-by-one error in the QUtf8Decoder::toUnicode function in Trolltech Qt 3 allows context-dependent attackers to cause a denial of service (crash) via a crafted Unicode string that triggers a heap-based buffer overflow. NOTE: Qt 4 has the same error in the QUtf8Codec::convertToUnicode function, but it is not exploitable.

Record
CVE-2007-4137
CVSS 2.0
7.5 HighAV:N/AC:L/Au:N/C:P/I:P/A:P
Weakness
CWE-119
Updated
2026-11-02
CVE List No score

Off-by-one error in the QUtf8Decoder::toUnicode function in Trolltech Qt 3 allows context-dependent attackers to cause a denial of service (crash) via a crafted Unicode string that triggers a heap-based buffer overflow. NOTE: Qt 4 has the same error in the QUtf8Codec::convertToUnicode function, but it is not exploitable.

Record
CVE-2007-4137
Updated
2026-11-02
EUVDEUVD-2007-4121 No score

Off-by-one error in the QUtf8Decoder::toUnicode function in Trolltech Qt 3 allows context-dependent attackers to cause a denial of service (crash) via a crafted Unicode string that triggers a heap-based buffer overflow. NOTE: Qt 4 has the same error in the QUtf8Codec::convertToUnicode function, but it is not exploitable.

Record
EUVD-2007-4121
Updated
2026-11-03
GitHub AdvisoriesGHSA-4hrv-qfhv-9vh5 No score

Off-by-one error in the QUtf8Decoder::toUnicode function in Trolltech Qt 3 allows context...

Off-by-one error in the QUtf8Decoder::toUnicode function in Trolltech Qt 3 allows context-dependent attackers to cause a denial of service (crash) via a crafted Unicode string that triggers a heap-based buffer overflow. NOTE: Qt 4 has the same error in the QUtf8Codec::convertToUnicode function, but it is not exploitable.

Record
GHSA-4hrv-qfhv-9vh5
Weakness
CWE-119
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
qt-x11-free
Debian:3.1
 before 3:3.3.4-3sarge3, plus listed versions
3:3.3.4-33:3.3.4-3sarge1
3:3.3.4-3sarge3
qt-x11-free
Debian:4.0
 before 3:3.3.7-4etch1, plus listed versions
3:3.3.7-4
3:3.3.7-4etch1
qt
Red Hat:enterprise_linux:2.1::as
 before 1:2.3.1-14.EL2
1:2.3.1-14.EL2
qt-Xt
Red Hat:enterprise_linux:2.1::as
 before 1:2.3.1-14.EL2
1:2.3.1-14.EL2
qt-designer
Red Hat:enterprise_linux:2.1::as
 before 1:2.3.1-14.EL2
1:2.3.1-14.EL2
qt-devel
Red Hat:enterprise_linux:2.1::as
 before 1:2.3.1-14.EL2
1:2.3.1-14.EL2
qt-static
Red Hat:enterprise_linux:2.1::as
 before 1:2.3.1-14.EL2
1:2.3.1-14.EL2
qt
Red Hat:enterprise_linux:2.1::aw
 before 1:2.3.1-14.EL2
1:2.3.1-14.EL2
qt-Xt
Red Hat:enterprise_linux:2.1::aw
 before 1:2.3.1-14.EL2
1:2.3.1-14.EL2
qt-designer
Red Hat:enterprise_linux:2.1::aw
 before 1:2.3.1-14.EL2
1:2.3.1-14.EL2
Show 92 moreShow less
Affected packages
PackageAffectedFixed
qt-devel
Red Hat:enterprise_linux:2.1::aw
 before 1:2.3.1-14.EL2
1:2.3.1-14.EL2
qt-static
Red Hat:enterprise_linux:2.1::aw
 before 1:2.3.1-14.EL2
1:2.3.1-14.EL2
qt
Red Hat:enterprise_linux:2.1::es
 before 1:2.3.1-14.EL2
1:2.3.1-14.EL2
qt-Xt
Red Hat:enterprise_linux:2.1::es
 before 1:2.3.1-14.EL2
1:2.3.1-14.EL2
qt-designer
Red Hat:enterprise_linux:2.1::es
 before 1:2.3.1-14.EL2
1:2.3.1-14.EL2
qt-devel
Red Hat:enterprise_linux:2.1::es
 before 1:2.3.1-14.EL2
1:2.3.1-14.EL2
qt-static
Red Hat:enterprise_linux:2.1::es
 before 1:2.3.1-14.EL2
1:2.3.1-14.EL2
qt
Red Hat:enterprise_linux:2.1::ws
 before 1:2.3.1-14.EL2
1:2.3.1-14.EL2
qt-Xt
Red Hat:enterprise_linux:2.1::ws
 before 1:2.3.1-14.EL2
1:2.3.1-14.EL2
qt-designer
Red Hat:enterprise_linux:2.1::ws
 before 1:2.3.1-14.EL2
1:2.3.1-14.EL2
qt-devel
Red Hat:enterprise_linux:2.1::ws
 before 1:2.3.1-14.EL2
1:2.3.1-14.EL2
qt-static
Red Hat:enterprise_linux:2.1::ws
 before 1:2.3.1-14.EL2
1:2.3.1-14.EL2
qt
Red Hat:enterprise_linux:3::as
 before 1:3.1.2-17.RHEL3
1:3.1.2-17.RHEL3
qt-MySQL
Red Hat:enterprise_linux:3::as
 before 1:3.1.2-17.RHEL3
1:3.1.2-17.RHEL3
qt-ODBC
Red Hat:enterprise_linux:3::as
 before 1:3.1.2-17.RHEL3
1:3.1.2-17.RHEL3
qt-config
Red Hat:enterprise_linux:3::as
 before 1:3.1.2-17.RHEL3
1:3.1.2-17.RHEL3
qt-debuginfo
Red Hat:enterprise_linux:3::as
 before 1:3.1.2-17.RHEL3
1:3.1.2-17.RHEL3
qt-designer
Red Hat:enterprise_linux:3::as
 before 1:3.1.2-17.RHEL3
1:3.1.2-17.RHEL3
qt-devel
Red Hat:enterprise_linux:3::as
 before 1:3.1.2-17.RHEL3
1:3.1.2-17.RHEL3
qt
Red Hat:enterprise_linux:3::desktop
 before 1:3.1.2-17.RHEL3
1:3.1.2-17.RHEL3
qt-MySQL
Red Hat:enterprise_linux:3::desktop
 before 1:3.1.2-17.RHEL3
1:3.1.2-17.RHEL3
qt-ODBC
Red Hat:enterprise_linux:3::desktop
 before 1:3.1.2-17.RHEL3
1:3.1.2-17.RHEL3
qt-config
Red Hat:enterprise_linux:3::desktop
 before 1:3.1.2-17.RHEL3
1:3.1.2-17.RHEL3
qt-debuginfo
Red Hat:enterprise_linux:3::desktop
 before 1:3.1.2-17.RHEL3
1:3.1.2-17.RHEL3
qt-designer
Red Hat:enterprise_linux:3::desktop
 before 1:3.1.2-17.RHEL3
1:3.1.2-17.RHEL3
qt-devel
Red Hat:enterprise_linux:3::desktop
 before 1:3.1.2-17.RHEL3
1:3.1.2-17.RHEL3
qt
Red Hat:enterprise_linux:3::es
 before 1:3.1.2-17.RHEL3
1:3.1.2-17.RHEL3
qt-MySQL
Red Hat:enterprise_linux:3::es
 before 1:3.1.2-17.RHEL3
1:3.1.2-17.RHEL3
qt-ODBC
Red Hat:enterprise_linux:3::es
 before 1:3.1.2-17.RHEL3
1:3.1.2-17.RHEL3
qt-config
Red Hat:enterprise_linux:3::es
 before 1:3.1.2-17.RHEL3
1:3.1.2-17.RHEL3
qt-debuginfo
Red Hat:enterprise_linux:3::es
 before 1:3.1.2-17.RHEL3
1:3.1.2-17.RHEL3
qt-designer
Red Hat:enterprise_linux:3::es
 before 1:3.1.2-17.RHEL3
1:3.1.2-17.RHEL3
qt-devel
Red Hat:enterprise_linux:3::es
 before 1:3.1.2-17.RHEL3
1:3.1.2-17.RHEL3
qt
Red Hat:enterprise_linux:3::ws
 before 1:3.1.2-17.RHEL3
1:3.1.2-17.RHEL3
qt-MySQL
Red Hat:enterprise_linux:3::ws
 before 1:3.1.2-17.RHEL3
1:3.1.2-17.RHEL3
qt-ODBC
Red Hat:enterprise_linux:3::ws
 before 1:3.1.2-17.RHEL3
1:3.1.2-17.RHEL3
qt-config
Red Hat:enterprise_linux:3::ws
 before 1:3.1.2-17.RHEL3
1:3.1.2-17.RHEL3
qt-debuginfo
Red Hat:enterprise_linux:3::ws
 before 1:3.1.2-17.RHEL3
1:3.1.2-17.RHEL3
qt-designer
Red Hat:enterprise_linux:3::ws
 before 1:3.1.2-17.RHEL3
1:3.1.2-17.RHEL3
qt-devel
Red Hat:enterprise_linux:3::ws
 before 1:3.1.2-17.RHEL3
1:3.1.2-17.RHEL3
qt
Red Hat:enterprise_linux:4::as
 before 1:3.3.3-13.RHEL4
1:3.3.3-13.RHEL4
qt-MySQL
Red Hat:enterprise_linux:4::as
 before 1:3.3.3-13.RHEL4
1:3.3.3-13.RHEL4
qt-ODBC
Red Hat:enterprise_linux:4::as
 before 1:3.3.3-13.RHEL4
1:3.3.3-13.RHEL4
qt-PostgreSQL
Red Hat:enterprise_linux:4::as
 before 1:3.3.3-13.RHEL4
1:3.3.3-13.RHEL4
qt-config
Red Hat:enterprise_linux:4::as
 before 1:3.3.3-13.RHEL4
1:3.3.3-13.RHEL4
qt-debuginfo
Red Hat:enterprise_linux:4::as
 before 1:3.3.3-13.RHEL4
1:3.3.3-13.RHEL4
qt-designer
Red Hat:enterprise_linux:4::as
 before 1:3.3.3-13.RHEL4
1:3.3.3-13.RHEL4
qt-devel
Red Hat:enterprise_linux:4::as
 before 1:3.3.3-13.RHEL4
1:3.3.3-13.RHEL4
qt
Red Hat:enterprise_linux:4::desktop
 before 1:3.3.3-13.RHEL4
1:3.3.3-13.RHEL4
qt-MySQL
Red Hat:enterprise_linux:4::desktop
 before 1:3.3.3-13.RHEL4
1:3.3.3-13.RHEL4
qt-ODBC
Red Hat:enterprise_linux:4::desktop
 before 1:3.3.3-13.RHEL4
1:3.3.3-13.RHEL4
qt-PostgreSQL
Red Hat:enterprise_linux:4::desktop
 before 1:3.3.3-13.RHEL4
1:3.3.3-13.RHEL4
qt-config
Red Hat:enterprise_linux:4::desktop
 before 1:3.3.3-13.RHEL4
1:3.3.3-13.RHEL4
qt-debuginfo
Red Hat:enterprise_linux:4::desktop
 before 1:3.3.3-13.RHEL4
1:3.3.3-13.RHEL4
qt-designer
Red Hat:enterprise_linux:4::desktop
 before 1:3.3.3-13.RHEL4
1:3.3.3-13.RHEL4
qt-devel
Red Hat:enterprise_linux:4::desktop
 before 1:3.3.3-13.RHEL4
1:3.3.3-13.RHEL4
qt
Red Hat:enterprise_linux:4::es
 before 1:3.3.3-13.RHEL4
1:3.3.3-13.RHEL4
qt-MySQL
Red Hat:enterprise_linux:4::es
 before 1:3.3.3-13.RHEL4
1:3.3.3-13.RHEL4
qt-ODBC
Red Hat:enterprise_linux:4::es
 before 1:3.3.3-13.RHEL4
1:3.3.3-13.RHEL4
qt-PostgreSQL
Red Hat:enterprise_linux:4::es
 before 1:3.3.3-13.RHEL4
1:3.3.3-13.RHEL4
qt-config
Red Hat:enterprise_linux:4::es
 before 1:3.3.3-13.RHEL4
1:3.3.3-13.RHEL4
qt-debuginfo
Red Hat:enterprise_linux:4::es
 before 1:3.3.3-13.RHEL4
1:3.3.3-13.RHEL4
qt-designer
Red Hat:enterprise_linux:4::es
 before 1:3.3.3-13.RHEL4
1:3.3.3-13.RHEL4
qt-devel
Red Hat:enterprise_linux:4::es
 before 1:3.3.3-13.RHEL4
1:3.3.3-13.RHEL4
qt
Red Hat:enterprise_linux:4::ws
 before 1:3.3.3-13.RHEL4
1:3.3.3-13.RHEL4
qt-MySQL
Red Hat:enterprise_linux:4::ws
 before 1:3.3.3-13.RHEL4
1:3.3.3-13.RHEL4
qt-ODBC
Red Hat:enterprise_linux:4::ws
 before 1:3.3.3-13.RHEL4
1:3.3.3-13.RHEL4
qt-PostgreSQL
Red Hat:enterprise_linux:4::ws
 before 1:3.3.3-13.RHEL4
1:3.3.3-13.RHEL4
qt-config
Red Hat:enterprise_linux:4::ws
 before 1:3.3.3-13.RHEL4
1:3.3.3-13.RHEL4
qt-debuginfo
Red Hat:enterprise_linux:4::ws
 before 1:3.3.3-13.RHEL4
1:3.3.3-13.RHEL4
qt-designer
Red Hat:enterprise_linux:4::ws
 before 1:3.3.3-13.RHEL4
1:3.3.3-13.RHEL4
qt-devel
Red Hat:enterprise_linux:4::ws
 before 1:3.3.3-13.RHEL4
1:3.3.3-13.RHEL4
qt
Red Hat:enterprise_linux:5::client_workstation
 before 1:3.3.6-23.el5
1:3.3.6-23.el5
qt-debuginfo
Red Hat:enterprise_linux:5::client_workstation
 before 1:3.3.6-23.el5
1:3.3.6-23.el5
qt-designer
Red Hat:enterprise_linux:5::client_workstation
 before 1:3.3.6-23.el5
1:3.3.6-23.el5
qt-devel
Red Hat:enterprise_linux:5::client_workstation
 before 1:3.3.6-23.el5
1:3.3.6-23.el5
qt-devel-docs
Red Hat:enterprise_linux:5::client_workstation
 before 1:3.3.6-23.el5
1:3.3.6-23.el5
qt
Red Hat:enterprise_linux:5::client
 before 1:3.3.6-23.el5
1:3.3.6-23.el5
qt-MySQL
Red Hat:enterprise_linux:5::client
 before 1:3.3.6-23.el5
1:3.3.6-23.el5
qt-ODBC
Red Hat:enterprise_linux:5::client
 before 1:3.3.6-23.el5
1:3.3.6-23.el5
qt-PostgreSQL
Red Hat:enterprise_linux:5::client
 before 1:3.3.6-23.el5
1:3.3.6-23.el5
qt-config
Red Hat:enterprise_linux:5::client
 before 1:3.3.6-23.el5
1:3.3.6-23.el5
qt-debuginfo
Red Hat:enterprise_linux:5::client
 before 1:3.3.6-23.el5
1:3.3.6-23.el5
qt
Red Hat:enterprise_linux:5::server
 before 1:3.3.6-23.el5
1:3.3.6-23.el5
qt-MySQL
Red Hat:enterprise_linux:5::server
 before 1:3.3.6-23.el5
1:3.3.6-23.el5
qt-ODBC
Red Hat:enterprise_linux:5::server
 before 1:3.3.6-23.el5
1:3.3.6-23.el5
qt-PostgreSQL
Red Hat:enterprise_linux:5::server
 before 1:3.3.6-23.el5
1:3.3.6-23.el5
qt-config
Red Hat:enterprise_linux:5::server
 before 1:3.3.6-23.el5
1:3.3.6-23.el5
qt-debuginfo
Red Hat:enterprise_linux:5::server
 before 1:3.3.6-23.el5
1:3.3.6-23.el5
qt-designer
Red Hat:enterprise_linux:5::server
 before 1:3.3.6-23.el5
1:3.3.6-23.el5
qt-devel
Red Hat:enterprise_linux:5::server
 before 1:3.3.6-23.el5
1:3.3.6-23.el5
qt-devel-docs
Red Hat:enterprise_linux:5::server
 before 1:3.3.6-23.el5
1:3.3.6-23.el5

History

History
RecordedChangedSources
aliasesEUVD
affected, aliases, facts, references, titleGitHub Advisories, OSV
first indexedCVE List, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2007-4137 is a high vulnerability (CVSS 7.5) in Trolltech Qt, published September 18, 2007. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.34%, the 83rd percentile. Fixed in qt-x11-free 3:3.3.4-3sarge3.

References

Show 40 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open