Every CVE Search/ Get API key

CVE-2007-3388

Multiple format string vulnerabilities in (1) qtextedit.cpp, (2) qdatatable.cpp, (3) qsqldatabase...

6.8 MediumFix available

Multiple format string vulnerabilities in (1) qtextedit.cpp, (2) qdatatable.cpp, (3) qsqldatabase.cpp, (4) qsqlindex.cpp, (5) qsqlrecord.cpp, (6) qglobal.cpp, and (7) qsvgdevice.cpp in QTextEdit in Trolltech Qt 3 before 3.3.8 20070727 allow remote attackers to execute arbitrary code via format string specifiers in text used to compose an error message.

Exploit likelihood

4.20%Down 8.0 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 6.8

Multiple format string vulnerabilities in (1) qtextedit.cpp, (2) qdatatable.cpp, (3) qsqldatabase.cpp, (4) qsqlindex.cpp, (5) qsqlrecord.cpp, (6) qglobal.cpp, and (7) qsvgdevice.cpp in QTextEdit in Trolltech Qt 3 before 3.3.8 20070727 allow remote attackers to execute arbitrary code via format string specifiers in text used to compose an error message.

Record
CVE-2007-3388
CVSS 2.0
6.8 MediumAV:N/AC:M/Au:N/C:P/I:P/A:P
Updated
2026-11-02
CVE List No score

Multiple format string vulnerabilities in (1) qtextedit.cpp, (2) qdatatable.cpp, (3) qsqldatabase.cpp, (4) qsqlindex.cpp, (5) qsqlrecord.cpp, (6) qglobal.cpp, and (7) qsvgdevice.cpp in QTextEdit in Trolltech Qt 3 before 3.3.8 20070727 allow remote attackers to execute arbitrary code via format string specifiers in text used to compose an error message.

Record
CVE-2007-3388
Updated
2026-11-02
EUVDEUVD-2007-3374 No score

Multiple format string vulnerabilities in (1) qtextedit.cpp, (2) qdatatable.cpp, (3) qsqldatabase.cpp, (4) qsqlindex.cpp, (5) qsqlrecord.cpp, (6) qglobal.cpp, and (7) qsvgdevice.cpp in QTextEdit in Trolltech Qt 3 before 3.3.8 20070727 allow remote attackers to execute arbitrary code via format string specifiers in text used to compose an error message.

Record
EUVD-2007-3374
Updated
2026-11-03
GitHub AdvisoriesGHSA-f86g-8g2c-pghw No score

Multiple format string vulnerabilities in (1) qtextedit.cpp, (2) qdatatable.cpp, (3) qsqldatabase...

Multiple format string vulnerabilities in (1) qtextedit.cpp, (2) qdatatable.cpp, (3) qsqldatabase.cpp, (4) qsqlindex.cpp, (5) qsqlrecord.cpp, (6) qglobal.cpp, and (7) qsvgdevice.cpp in QTextEdit in Trolltech Qt 3 before 3.3.8 20070727 allow remote attackers to execute arbitrary code via format string specifiers in text used to compose an error message.

Record
GHSA-f86g-8g2c-pghw
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
qt-x11-free
Debian:3.1
 before 3:3.3.4-3sarge3, plus listed versions
3:3.3.4-33:3.3.4-3sarge1
3:3.3.4-3sarge3
qt-x11-free
Debian:4.0
 before 3:3.3.7-4etch1, plus listed versions
3:3.3.7-4
3:3.3.7-4etch1
qt
Red Hat:enterprise_linux:3::as
 before 1:3.1.2-16.RHEL3
1:3.1.2-16.RHEL3
qt-MySQL
Red Hat:enterprise_linux:3::as
 before 1:3.1.2-16.RHEL3
1:3.1.2-16.RHEL3
qt-ODBC
Red Hat:enterprise_linux:3::as
 before 1:3.1.2-16.RHEL3
1:3.1.2-16.RHEL3
qt-config
Red Hat:enterprise_linux:3::as
 before 1:3.1.2-16.RHEL3
1:3.1.2-16.RHEL3
qt-debuginfo
Red Hat:enterprise_linux:3::as
 before 1:3.1.2-16.RHEL3
1:3.1.2-16.RHEL3
qt-designer
Red Hat:enterprise_linux:3::as
 before 1:3.1.2-16.RHEL3
1:3.1.2-16.RHEL3
qt-devel
Red Hat:enterprise_linux:3::as
 before 1:3.1.2-16.RHEL3
1:3.1.2-16.RHEL3
qt
Red Hat:enterprise_linux:3::desktop
 before 1:3.1.2-16.RHEL3
1:3.1.2-16.RHEL3
Show 72 moreShow less
Affected packages
PackageAffectedFixed
qt-MySQL
Red Hat:enterprise_linux:3::desktop
 before 1:3.1.2-16.RHEL3
1:3.1.2-16.RHEL3
qt-ODBC
Red Hat:enterprise_linux:3::desktop
 before 1:3.1.2-16.RHEL3
1:3.1.2-16.RHEL3
qt-config
Red Hat:enterprise_linux:3::desktop
 before 1:3.1.2-16.RHEL3
1:3.1.2-16.RHEL3
qt-debuginfo
Red Hat:enterprise_linux:3::desktop
 before 1:3.1.2-16.RHEL3
1:3.1.2-16.RHEL3
qt-designer
Red Hat:enterprise_linux:3::desktop
 before 1:3.1.2-16.RHEL3
1:3.1.2-16.RHEL3
qt-devel
Red Hat:enterprise_linux:3::desktop
 before 1:3.1.2-16.RHEL3
1:3.1.2-16.RHEL3
qt
Red Hat:enterprise_linux:3::es
 before 1:3.1.2-16.RHEL3
1:3.1.2-16.RHEL3
qt-MySQL
Red Hat:enterprise_linux:3::es
 before 1:3.1.2-16.RHEL3
1:3.1.2-16.RHEL3
qt-ODBC
Red Hat:enterprise_linux:3::es
 before 1:3.1.2-16.RHEL3
1:3.1.2-16.RHEL3
qt-config
Red Hat:enterprise_linux:3::es
 before 1:3.1.2-16.RHEL3
1:3.1.2-16.RHEL3
qt-debuginfo
Red Hat:enterprise_linux:3::es
 before 1:3.1.2-16.RHEL3
1:3.1.2-16.RHEL3
qt-designer
Red Hat:enterprise_linux:3::es
 before 1:3.1.2-16.RHEL3
1:3.1.2-16.RHEL3
qt-devel
Red Hat:enterprise_linux:3::es
 before 1:3.1.2-16.RHEL3
1:3.1.2-16.RHEL3
qt
Red Hat:enterprise_linux:3::ws
 before 1:3.1.2-16.RHEL3
1:3.1.2-16.RHEL3
qt-MySQL
Red Hat:enterprise_linux:3::ws
 before 1:3.1.2-16.RHEL3
1:3.1.2-16.RHEL3
qt-ODBC
Red Hat:enterprise_linux:3::ws
 before 1:3.1.2-16.RHEL3
1:3.1.2-16.RHEL3
qt-config
Red Hat:enterprise_linux:3::ws
 before 1:3.1.2-16.RHEL3
1:3.1.2-16.RHEL3
qt-debuginfo
Red Hat:enterprise_linux:3::ws
 before 1:3.1.2-16.RHEL3
1:3.1.2-16.RHEL3
qt-designer
Red Hat:enterprise_linux:3::ws
 before 1:3.1.2-16.RHEL3
1:3.1.2-16.RHEL3
qt-devel
Red Hat:enterprise_linux:3::ws
 before 1:3.1.2-16.RHEL3
1:3.1.2-16.RHEL3
qt
Red Hat:enterprise_linux:4::as
 before 1:3.3.3-11.RHEL4
1:3.3.3-11.RHEL4
qt-MySQL
Red Hat:enterprise_linux:4::as
 before 1:3.3.3-11.RHEL4
1:3.3.3-11.RHEL4
qt-ODBC
Red Hat:enterprise_linux:4::as
 before 1:3.3.3-11.RHEL4
1:3.3.3-11.RHEL4
qt-PostgreSQL
Red Hat:enterprise_linux:4::as
 before 1:3.3.3-11.RHEL4
1:3.3.3-11.RHEL4
qt-config
Red Hat:enterprise_linux:4::as
 before 1:3.3.3-11.RHEL4
1:3.3.3-11.RHEL4
qt-debuginfo
Red Hat:enterprise_linux:4::as
 before 1:3.3.3-11.RHEL4
1:3.3.3-11.RHEL4
qt-designer
Red Hat:enterprise_linux:4::as
 before 1:3.3.3-11.RHEL4
1:3.3.3-11.RHEL4
qt-devel
Red Hat:enterprise_linux:4::as
 before 1:3.3.3-11.RHEL4
1:3.3.3-11.RHEL4
qt
Red Hat:enterprise_linux:4::desktop
 before 1:3.3.3-11.RHEL4
1:3.3.3-11.RHEL4
qt-MySQL
Red Hat:enterprise_linux:4::desktop
 before 1:3.3.3-11.RHEL4
1:3.3.3-11.RHEL4
qt-ODBC
Red Hat:enterprise_linux:4::desktop
 before 1:3.3.3-11.RHEL4
1:3.3.3-11.RHEL4
qt-PostgreSQL
Red Hat:enterprise_linux:4::desktop
 before 1:3.3.3-11.RHEL4
1:3.3.3-11.RHEL4
qt-config
Red Hat:enterprise_linux:4::desktop
 before 1:3.3.3-11.RHEL4
1:3.3.3-11.RHEL4
qt-debuginfo
Red Hat:enterprise_linux:4::desktop
 before 1:3.3.3-11.RHEL4
1:3.3.3-11.RHEL4
qt-designer
Red Hat:enterprise_linux:4::desktop
 before 1:3.3.3-11.RHEL4
1:3.3.3-11.RHEL4
qt-devel
Red Hat:enterprise_linux:4::desktop
 before 1:3.3.3-11.RHEL4
1:3.3.3-11.RHEL4
qt
Red Hat:enterprise_linux:4::es
 before 1:3.3.3-11.RHEL4
1:3.3.3-11.RHEL4
qt-MySQL
Red Hat:enterprise_linux:4::es
 before 1:3.3.3-11.RHEL4
1:3.3.3-11.RHEL4
qt-ODBC
Red Hat:enterprise_linux:4::es
 before 1:3.3.3-11.RHEL4
1:3.3.3-11.RHEL4
qt-PostgreSQL
Red Hat:enterprise_linux:4::es
 before 1:3.3.3-11.RHEL4
1:3.3.3-11.RHEL4
qt-config
Red Hat:enterprise_linux:4::es
 before 1:3.3.3-11.RHEL4
1:3.3.3-11.RHEL4
qt-debuginfo
Red Hat:enterprise_linux:4::es
 before 1:3.3.3-11.RHEL4
1:3.3.3-11.RHEL4
qt-designer
Red Hat:enterprise_linux:4::es
 before 1:3.3.3-11.RHEL4
1:3.3.3-11.RHEL4
qt-devel
Red Hat:enterprise_linux:4::es
 before 1:3.3.3-11.RHEL4
1:3.3.3-11.RHEL4
qt
Red Hat:enterprise_linux:4::ws
 before 1:3.3.3-11.RHEL4
1:3.3.3-11.RHEL4
qt-MySQL
Red Hat:enterprise_linux:4::ws
 before 1:3.3.3-11.RHEL4
1:3.3.3-11.RHEL4
qt-ODBC
Red Hat:enterprise_linux:4::ws
 before 1:3.3.3-11.RHEL4
1:3.3.3-11.RHEL4
qt-PostgreSQL
Red Hat:enterprise_linux:4::ws
 before 1:3.3.3-11.RHEL4
1:3.3.3-11.RHEL4
qt-config
Red Hat:enterprise_linux:4::ws
 before 1:3.3.3-11.RHEL4
1:3.3.3-11.RHEL4
qt-debuginfo
Red Hat:enterprise_linux:4::ws
 before 1:3.3.3-11.RHEL4
1:3.3.3-11.RHEL4
qt-designer
Red Hat:enterprise_linux:4::ws
 before 1:3.3.3-11.RHEL4
1:3.3.3-11.RHEL4
qt-devel
Red Hat:enterprise_linux:4::ws
 before 1:3.3.3-11.RHEL4
1:3.3.3-11.RHEL4
qt
Red Hat:enterprise_linux:5::client_workstation
 before 1:3.3.6-21.el5
1:3.3.6-21.el5
qt-debuginfo
Red Hat:enterprise_linux:5::client_workstation
 before 1:3.3.6-21.el5
1:3.3.6-21.el5
qt-designer
Red Hat:enterprise_linux:5::client_workstation
 before 1:3.3.6-21.el5
1:3.3.6-21.el5
qt-devel
Red Hat:enterprise_linux:5::client_workstation
 before 1:3.3.6-21.el5
1:3.3.6-21.el5
qt-devel-docs
Red Hat:enterprise_linux:5::client_workstation
 before 1:3.3.6-21.el5
1:3.3.6-21.el5
qt
Red Hat:enterprise_linux:5::client
 before 1:3.3.6-21.el5
1:3.3.6-21.el5
qt-MySQL
Red Hat:enterprise_linux:5::client
 before 1:3.3.6-21.el5
1:3.3.6-21.el5
qt-ODBC
Red Hat:enterprise_linux:5::client
 before 1:3.3.6-21.el5
1:3.3.6-21.el5
qt-PostgreSQL
Red Hat:enterprise_linux:5::client
 before 1:3.3.6-21.el5
1:3.3.6-21.el5
qt-config
Red Hat:enterprise_linux:5::client
 before 1:3.3.6-21.el5
1:3.3.6-21.el5
qt-debuginfo
Red Hat:enterprise_linux:5::client
 before 1:3.3.6-21.el5
1:3.3.6-21.el5
qt
Red Hat:enterprise_linux:5::server
 before 1:3.3.6-21.el5
1:3.3.6-21.el5
qt-MySQL
Red Hat:enterprise_linux:5::server
 before 1:3.3.6-21.el5
1:3.3.6-21.el5
qt-ODBC
Red Hat:enterprise_linux:5::server
 before 1:3.3.6-21.el5
1:3.3.6-21.el5
qt-PostgreSQL
Red Hat:enterprise_linux:5::server
 before 1:3.3.6-21.el5
1:3.3.6-21.el5
qt-config
Red Hat:enterprise_linux:5::server
 before 1:3.3.6-21.el5
1:3.3.6-21.el5
qt-debuginfo
Red Hat:enterprise_linux:5::server
 before 1:3.3.6-21.el5
1:3.3.6-21.el5
qt-designer
Red Hat:enterprise_linux:5::server
 before 1:3.3.6-21.el5
1:3.3.6-21.el5
qt-devel
Red Hat:enterprise_linux:5::server
 before 1:3.3.6-21.el5
1:3.3.6-21.el5
qt-devel-docs
Red Hat:enterprise_linux:5::server
 before 1:3.3.6-21.el5
1:3.3.6-21.el5

History

History
RecordedChangedSources
aliasesEUVD
affected, aliases, facts, references, titleGitHub Advisories, OSV
first indexedCVE List, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2007-3388 is a medium vulnerability (CVSS 6.8) in Trolltech Qt, published August 3, 2007. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 4.20%, the 90th percentile. Fixed in qt-x11-free 3:3.3.4-3sarge3.

References

Show 37 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open