Every CVESearch/Get API key

CVE-2007-3388

Multiple format string vulnerabilities in (1) qtextedit.cpp, (2) qdatatable.cpp, (3) qsqldatabase...

6.8 MediumFix available

CVE-2007-3388 is a medium vulnerability (CVSS 6.8) in Trolltech Qt, published August 3, 2007. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 4.20%, the 91st percentile. Fixed in qt 1:3.1.2-16.RHEL3.

What does this mean?
Severity
6.8 MediumCVSS 2.0, NVD
Exploit chance
4.20%EPSS, 91st percentile
Exploitation
None knownNot on CISA’s or ENISA’s lists
Fixed in
1:3.1.2-16.RHEL3qt +81 more

Description

Multiple format string vulnerabilities in (1) qtextedit.cpp, (2) qdatatable.cpp, (3) qsqldatabase.cpp, (4) qsqlindex.cpp, (5) qsqlrecord.cpp, (6) qglobal.cpp, and (7) qsvgdevice.cpp in QTextEdit in Trolltech Qt 3 before 3.3.8 20070727 allow remote attackers to execute arbitrary code via format string specifiers in text used to compose an error message.

Exploit likelihood

4.20%Down 8.0 points since Feb 4, 2022
90%50%10%1%

Affected products

Affected packages

Affected packages
PackageAffectedFixed
qt-x11-free
Debian:3.1
From an advisory covering 2 CVEs
before 3:3.3.4-3sarge3, plus listed versions
3:3.3.4-33:3.3.4-3sarge1
3:3.3.4-3sarge3
qt-x11-free
Debian:4.0
From an advisory covering 2 CVEs
before 3:3.3.7-4etch1, plus listed versions
3:3.3.7-4
3:3.3.7-4etch1
qt
Red Hat:enterprise_linux:3::as
before 1:3.1.2-16.RHEL3
1:3.1.2-16.RHEL3
qt-MySQL
Red Hat:enterprise_linux:3::as
before 1:3.1.2-16.RHEL3
1:3.1.2-16.RHEL3
qt-ODBC
Red Hat:enterprise_linux:3::as
before 1:3.1.2-16.RHEL3
1:3.1.2-16.RHEL3
qt-config
Red Hat:enterprise_linux:3::as
before 1:3.1.2-16.RHEL3
1:3.1.2-16.RHEL3
qt-debuginfo
Red Hat:enterprise_linux:3::as
before 1:3.1.2-16.RHEL3
1:3.1.2-16.RHEL3
qt-designer
Red Hat:enterprise_linux:3::as
before 1:3.1.2-16.RHEL3
1:3.1.2-16.RHEL3
qt-devel
Red Hat:enterprise_linux:3::as
before 1:3.1.2-16.RHEL3
1:3.1.2-16.RHEL3
qt
Red Hat:enterprise_linux:3::desktop
before 1:3.1.2-16.RHEL3
1:3.1.2-16.RHEL3
Show 72 moreShow less
Affected packages
PackageAffectedFixed
qt-MySQL
Red Hat:enterprise_linux:3::desktop
before 1:3.1.2-16.RHEL3
1:3.1.2-16.RHEL3
qt-ODBC
Red Hat:enterprise_linux:3::desktop
before 1:3.1.2-16.RHEL3
1:3.1.2-16.RHEL3
qt-config
Red Hat:enterprise_linux:3::desktop
before 1:3.1.2-16.RHEL3
1:3.1.2-16.RHEL3
qt-debuginfo
Red Hat:enterprise_linux:3::desktop
before 1:3.1.2-16.RHEL3
1:3.1.2-16.RHEL3
qt-designer
Red Hat:enterprise_linux:3::desktop
before 1:3.1.2-16.RHEL3
1:3.1.2-16.RHEL3
qt-devel
Red Hat:enterprise_linux:3::desktop
before 1:3.1.2-16.RHEL3
1:3.1.2-16.RHEL3
qt
Red Hat:enterprise_linux:3::es
before 1:3.1.2-16.RHEL3
1:3.1.2-16.RHEL3
qt-MySQL
Red Hat:enterprise_linux:3::es
before 1:3.1.2-16.RHEL3
1:3.1.2-16.RHEL3
qt-ODBC
Red Hat:enterprise_linux:3::es
before 1:3.1.2-16.RHEL3
1:3.1.2-16.RHEL3
qt-config
Red Hat:enterprise_linux:3::es
before 1:3.1.2-16.RHEL3
1:3.1.2-16.RHEL3
qt-debuginfo
Red Hat:enterprise_linux:3::es
before 1:3.1.2-16.RHEL3
1:3.1.2-16.RHEL3
qt-designer
Red Hat:enterprise_linux:3::es
before 1:3.1.2-16.RHEL3
1:3.1.2-16.RHEL3
qt-devel
Red Hat:enterprise_linux:3::es
before 1:3.1.2-16.RHEL3
1:3.1.2-16.RHEL3
qt
Red Hat:enterprise_linux:3::ws
before 1:3.1.2-16.RHEL3
1:3.1.2-16.RHEL3
qt-MySQL
Red Hat:enterprise_linux:3::ws
before 1:3.1.2-16.RHEL3
1:3.1.2-16.RHEL3
qt-ODBC
Red Hat:enterprise_linux:3::ws
before 1:3.1.2-16.RHEL3
1:3.1.2-16.RHEL3
qt-config
Red Hat:enterprise_linux:3::ws
before 1:3.1.2-16.RHEL3
1:3.1.2-16.RHEL3
qt-debuginfo
Red Hat:enterprise_linux:3::ws
before 1:3.1.2-16.RHEL3
1:3.1.2-16.RHEL3
qt-designer
Red Hat:enterprise_linux:3::ws
before 1:3.1.2-16.RHEL3
1:3.1.2-16.RHEL3
qt-devel
Red Hat:enterprise_linux:3::ws
before 1:3.1.2-16.RHEL3
1:3.1.2-16.RHEL3
qt
Red Hat:enterprise_linux:4::as
before 1:3.3.3-11.RHEL4
1:3.3.3-11.RHEL4
qt-MySQL
Red Hat:enterprise_linux:4::as
before 1:3.3.3-11.RHEL4
1:3.3.3-11.RHEL4
qt-ODBC
Red Hat:enterprise_linux:4::as
before 1:3.3.3-11.RHEL4
1:3.3.3-11.RHEL4
qt-PostgreSQL
Red Hat:enterprise_linux:4::as
before 1:3.3.3-11.RHEL4
1:3.3.3-11.RHEL4
qt-config
Red Hat:enterprise_linux:4::as
before 1:3.3.3-11.RHEL4
1:3.3.3-11.RHEL4
qt-debuginfo
Red Hat:enterprise_linux:4::as
before 1:3.3.3-11.RHEL4
1:3.3.3-11.RHEL4
qt-designer
Red Hat:enterprise_linux:4::as
before 1:3.3.3-11.RHEL4
1:3.3.3-11.RHEL4
qt-devel
Red Hat:enterprise_linux:4::as
before 1:3.3.3-11.RHEL4
1:3.3.3-11.RHEL4
qt
Red Hat:enterprise_linux:4::desktop
before 1:3.3.3-11.RHEL4
1:3.3.3-11.RHEL4
qt-MySQL
Red Hat:enterprise_linux:4::desktop
before 1:3.3.3-11.RHEL4
1:3.3.3-11.RHEL4
qt-ODBC
Red Hat:enterprise_linux:4::desktop
before 1:3.3.3-11.RHEL4
1:3.3.3-11.RHEL4
qt-PostgreSQL
Red Hat:enterprise_linux:4::desktop
before 1:3.3.3-11.RHEL4
1:3.3.3-11.RHEL4
qt-config
Red Hat:enterprise_linux:4::desktop
before 1:3.3.3-11.RHEL4
1:3.3.3-11.RHEL4
qt-debuginfo
Red Hat:enterprise_linux:4::desktop
before 1:3.3.3-11.RHEL4
1:3.3.3-11.RHEL4
qt-designer
Red Hat:enterprise_linux:4::desktop
before 1:3.3.3-11.RHEL4
1:3.3.3-11.RHEL4
qt-devel
Red Hat:enterprise_linux:4::desktop
before 1:3.3.3-11.RHEL4
1:3.3.3-11.RHEL4
qt
Red Hat:enterprise_linux:4::es
before 1:3.3.3-11.RHEL4
1:3.3.3-11.RHEL4
qt-MySQL
Red Hat:enterprise_linux:4::es
before 1:3.3.3-11.RHEL4
1:3.3.3-11.RHEL4
qt-ODBC
Red Hat:enterprise_linux:4::es
before 1:3.3.3-11.RHEL4
1:3.3.3-11.RHEL4
qt-PostgreSQL
Red Hat:enterprise_linux:4::es
before 1:3.3.3-11.RHEL4
1:3.3.3-11.RHEL4
qt-config
Red Hat:enterprise_linux:4::es
before 1:3.3.3-11.RHEL4
1:3.3.3-11.RHEL4
qt-debuginfo
Red Hat:enterprise_linux:4::es
before 1:3.3.3-11.RHEL4
1:3.3.3-11.RHEL4
qt-designer
Red Hat:enterprise_linux:4::es
before 1:3.3.3-11.RHEL4
1:3.3.3-11.RHEL4
qt-devel
Red Hat:enterprise_linux:4::es
before 1:3.3.3-11.RHEL4
1:3.3.3-11.RHEL4
qt
Red Hat:enterprise_linux:4::ws
before 1:3.3.3-11.RHEL4
1:3.3.3-11.RHEL4
qt-MySQL
Red Hat:enterprise_linux:4::ws
before 1:3.3.3-11.RHEL4
1:3.3.3-11.RHEL4
qt-ODBC
Red Hat:enterprise_linux:4::ws
before 1:3.3.3-11.RHEL4
1:3.3.3-11.RHEL4
qt-PostgreSQL
Red Hat:enterprise_linux:4::ws
before 1:3.3.3-11.RHEL4
1:3.3.3-11.RHEL4
qt-config
Red Hat:enterprise_linux:4::ws
before 1:3.3.3-11.RHEL4
1:3.3.3-11.RHEL4
qt-debuginfo
Red Hat:enterprise_linux:4::ws
before 1:3.3.3-11.RHEL4
1:3.3.3-11.RHEL4
qt-designer
Red Hat:enterprise_linux:4::ws
before 1:3.3.3-11.RHEL4
1:3.3.3-11.RHEL4
qt-devel
Red Hat:enterprise_linux:4::ws
before 1:3.3.3-11.RHEL4
1:3.3.3-11.RHEL4
qt
Red Hat:enterprise_linux:5::client_workstation
before 1:3.3.6-21.el5
1:3.3.6-21.el5
qt-debuginfo
Red Hat:enterprise_linux:5::client_workstation
before 1:3.3.6-21.el5
1:3.3.6-21.el5
qt-designer
Red Hat:enterprise_linux:5::client_workstation
before 1:3.3.6-21.el5
1:3.3.6-21.el5
qt-devel
Red Hat:enterprise_linux:5::client_workstation
before 1:3.3.6-21.el5
1:3.3.6-21.el5
qt-devel-docs
Red Hat:enterprise_linux:5::client_workstation
before 1:3.3.6-21.el5
1:3.3.6-21.el5
qt
Red Hat:enterprise_linux:5::client
before 1:3.3.6-21.el5
1:3.3.6-21.el5
qt-MySQL
Red Hat:enterprise_linux:5::client
before 1:3.3.6-21.el5
1:3.3.6-21.el5
qt-ODBC
Red Hat:enterprise_linux:5::client
before 1:3.3.6-21.el5
1:3.3.6-21.el5
qt-PostgreSQL
Red Hat:enterprise_linux:5::client
before 1:3.3.6-21.el5
1:3.3.6-21.el5
qt-config
Red Hat:enterprise_linux:5::client
before 1:3.3.6-21.el5
1:3.3.6-21.el5
qt-debuginfo
Red Hat:enterprise_linux:5::client
before 1:3.3.6-21.el5
1:3.3.6-21.el5
qt
Red Hat:enterprise_linux:5::server
before 1:3.3.6-21.el5
1:3.3.6-21.el5
qt-MySQL
Red Hat:enterprise_linux:5::server
before 1:3.3.6-21.el5
1:3.3.6-21.el5
qt-ODBC
Red Hat:enterprise_linux:5::server
before 1:3.3.6-21.el5
1:3.3.6-21.el5
qt-PostgreSQL
Red Hat:enterprise_linux:5::server
before 1:3.3.6-21.el5
1:3.3.6-21.el5
qt-config
Red Hat:enterprise_linux:5::server
before 1:3.3.6-21.el5
1:3.3.6-21.el5
qt-debuginfo
Red Hat:enterprise_linux:5::server
before 1:3.3.6-21.el5
1:3.3.6-21.el5
qt-designer
Red Hat:enterprise_linux:5::server
before 1:3.3.6-21.el5
1:3.3.6-21.el5
qt-devel
Red Hat:enterprise_linux:5::server
before 1:3.3.6-21.el5
1:3.3.6-21.el5
qt-devel-docs
Red Hat:enterprise_linux:5::server
before 1:3.3.6-21.el5
1:3.3.6-21.el5

What each source reports

NVD Score used6.8

Multiple format string vulnerabilities in (1) qtextedit.cpp, (2) qdatatable.cpp, (3) qsqldatabase.cpp, (4) qsqlindex.cpp, (5) qsqlrecord.cpp, (6) qglobal.cpp, and (7) qsvgdevice.cpp in QTextEdit in Trolltech Qt 3 before 3.3.8 20070727 allow remote attackers to execute arbitrary code via format string specifiers in text used to compose an error message.

Record
CVE-2007-3388
CVSS 2.0
6.8 MediumAV:N/AC:M/Au:N/C:P/I:P/A:P
Updated
2026-11-02
CVE ListNo score

Multiple format string vulnerabilities in (1) qtextedit.cpp, (2) qdatatable.cpp, (3) qsqldatabase.cpp, (4) qsqlindex.cpp, (5) qsqlrecord.cpp, (6) qglobal.cpp, and (7) qsvgdevice.cpp in QTextEdit in Trolltech Qt 3 before 3.3.8 20070727 allow remote attackers to execute arbitrary code via format string specifiers in text used to compose an error message.

Record
CVE-2007-3388
Updated
2026-11-02
EUVDEUVD-2007-3374No score

Multiple format string vulnerabilities in (1) qtextedit.cpp, (2) qdatatable.cpp, (3) qsqldatabase.cpp, (4) qsqlindex.cpp, (5) qsqlrecord.cpp, (6) qglobal.cpp, and (7) qsvgdevice.cpp in QTextEdit in Trolltech Qt 3 before 3.3.8 20070727 allow remote attackers to execute arbitrary code via format string specifiers in text used to compose an error message.

Record
EUVD-2007-3374
Updated
2026-11-03
GitHub AdvisoriesGHSA-f86g-8g2c-pghwNo score

Multiple format string vulnerabilities in (1) qtextedit.cpp, (2) qdatatable.cpp, (3) qsqldatabase...

Multiple format string vulnerabilities in (1) qtextedit.cpp, (2) qdatatable.cpp, (3) qsqldatabase.cpp, (4) qsqlindex.cpp, (5) qsqlrecord.cpp, (6) qglobal.cpp, and (7) qsvgdevice.cpp in QTextEdit in Trolltech Qt 3 before 3.3.8 20070727 allow remote attackers to execute arbitrary code via format string specifiers in text used to compose an error message.

Record
GHSA-f86g-8g2c-pghw
Updated
2026-11-02

History

History
RecordedChangedSources
affected, facts
aliasesEUVD
affected, aliases, facts, references, titleGitHub Advisories, OSV
first indexedCVE List, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

References

Show 37 moreShow less
PagesAll vulnerabilitiesBrowseDocsSourcesGuideGet API key
MoveEnter Open