{"id":"CVE-2007-0242","aliases":["DEBIAN-CVE-2007-0242","DSA-1292-1","EUVD-2007-0244","GHSA-4hj5-9h7j-98c6","RHSA-2007:0883","RHSA-2007:0909","RHSA-2011:1324"],"status":"published","title":"The UTF-8 decoder in codecs/qutfcodec.cpp in Qt 3.3.8 and 4.2.3 does not reject long UTF-8...","description":"The UTF-8 decoder in codecs/qutfcodec.cpp in Qt 3.3.8 and 4.2.3 does not reject long UTF-8 sequences as required by the standard, which allows remote attackers to conduct cross-site scripting (XSS) and directory traversal attacks via long sequences that decode to dangerous metacharacters.","severity":{"version":"2.0","score":4.3,"vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.0212,"percentile":0.82005,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2007-04-03T16:00:00Z","modified":"2026-06-26T12:21:39Z","fixes":[{"ecosystem":"Debian:4.0","package":"qt4-x11","fixed_in":["4.2.1-2etch1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:4.0","package":"qt4-x11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.1-2etch1"}]}],"versions":["4.2.1-2"]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:2.1::as","package":"qt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.3.1-14.EL2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:2.1::as","package":"qt-Xt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.3.1-14.EL2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:2.1::as","package":"qt-designer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.3.1-14.EL2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:2.1::as","package":"qt-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.3.1-14.EL2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:2.1::as","package":"qt-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.3.1-14.EL2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:2.1::aw","package":"qt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.3.1-14.EL2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:2.1::aw","package":"qt-Xt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.3.1-14.EL2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:2.1::aw","package":"qt-designer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.3.1-14.EL2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:2.1::aw","package":"qt-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.3.1-14.EL2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:2.1::aw","package":"qt-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.3.1-14.EL2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:2.1::es","package":"qt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.3.1-14.EL2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:2.1::es","package":"qt-Xt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.3.1-14.EL2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:2.1::es","package":"qt-designer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.3.1-14.EL2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:2.1::es","package":"qt-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.3.1-14.EL2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:2.1::es","package":"qt-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.3.1-14.EL2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:2.1::ws","package":"qt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.3.1-14.EL2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:2.1::ws","package":"qt-Xt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.3.1-14.EL2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:2.1::ws","package":"qt-designer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.3.1-14.EL2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:2.1::ws","package":"qt-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.3.1-14.EL2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:2.1::ws","package":"qt-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.3.1-14.EL2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::as","package":"qt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.1.2-17.RHEL3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::as","package":"qt-MySQL","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.1.2-17.RHEL3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::as","package":"qt-ODBC","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.1.2-17.RHEL3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::as","package":"qt-config","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.1.2-17.RHEL3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::as","package":"qt-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.1.2-17.RHEL3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::as","package":"qt-designer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.1.2-17.RHEL3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::as","package":"qt-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.1.2-17.RHEL3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::desktop","package":"qt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.1.2-17.RHEL3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::desktop","package":"qt-MySQL","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.1.2-17.RHEL3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::desktop","package":"qt-ODBC","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.1.2-17.RHEL3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::desktop","package":"qt-config","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.1.2-17.RHEL3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::desktop","package":"qt-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.1.2-17.RHEL3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::desktop","package":"qt-designer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.1.2-17.RHEL3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::desktop","package":"qt-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.1.2-17.RHEL3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::es","package":"qt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.1.2-17.RHEL3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::es","package":"qt-MySQL","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.1.2-17.RHEL3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::es","package":"qt-ODBC","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.1.2-17.RHEL3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::es","package":"qt-config","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.1.2-17.RHEL3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::es","package":"qt-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.1.2-17.RHEL3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::es","package":"qt-designer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.1.2-17.RHEL3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::es","package":"qt-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.1.2-17.RHEL3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::ws","package":"qt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.1.2-17.RHEL3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::ws","package":"qt-MySQL","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.1.2-17.RHEL3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::ws","package":"qt-ODBC","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.1.2-17.RHEL3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::ws","package":"qt-config","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.1.2-17.RHEL3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::ws","package":"qt-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.1.2-17.RHEL3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::ws","package":"qt-designer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.1.2-17.RHEL3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::ws","package":"qt-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.1.2-17.RHEL3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::as","package":"qt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.3.3-13.RHEL4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::as","package":"qt-MySQL","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.3.3-13.RHEL4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::as","package":"qt-ODBC","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.3.3-13.RHEL4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::as","package":"qt-PostgreSQL","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.3.3-13.RHEL4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::as","package":"qt-config","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.3.3-13.RHEL4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::as","package":"qt-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.3.3-13.RHEL4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::as","package":"qt-designer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.3.3-13.RHEL4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::as","package":"qt-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.3.3-13.RHEL4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"qt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.3.3-13.RHEL4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"qt-MySQL","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.3.3-13.RHEL4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"qt-ODBC","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.3.3-13.RHEL4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"qt-PostgreSQL","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.3.3-13.RHEL4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"qt-config","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.3.3-13.RHEL4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"qt-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.3.3-13.RHEL4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"qt-designer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.3.3-13.RHEL4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"qt-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.3.3-13.RHEL4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::es","package":"qt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.3.3-13.RHEL4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::es","package":"qt-MySQL","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.3.3-13.RHEL4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::es","package":"qt-ODBC","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.3.3-13.RHEL4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::es","package":"qt-PostgreSQL","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.3.3-13.RHEL4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::es","package":"qt-config","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.3.3-13.RHEL4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::es","package":"qt-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.3.3-13.RHEL4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::es","package":"qt-designer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.3.3-13.RHEL4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::es","package":"qt-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.3.3-13.RHEL4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::ws","package":"qt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.3.3-13.RHEL4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::ws","package":"qt-MySQL","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.3.3-13.RHEL4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::ws","package":"qt-ODBC","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.3.3-13.RHEL4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::ws","package":"qt-PostgreSQL","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.3.3-13.RHEL4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::ws","package":"qt-config","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.3.3-13.RHEL4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::ws","package":"qt-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.3.3-13.RHEL4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::ws","package":"qt-designer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.3.3-13.RHEL4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::ws","package":"qt-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.3.3-13.RHEL4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client_workstation","package":"qt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.3.6-23.el5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client_workstation","package":"qt-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.3.6-23.el5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client_workstation","package":"qt-designer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.3.6-23.el5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client_workstation","package":"qt-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.3.6-23.el5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client_workstation","package":"qt-devel-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.3.6-23.el5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"qt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.3.6-23.el5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"qt-MySQL","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.3.6-23.el5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"qt-ODBC","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.3.6-23.el5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"qt-PostgreSQL","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.3.6-23.el5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"qt-config","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.3.6-23.el5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"qt-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.3.6-23.el5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"qt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.3.6-23.el5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"qt-MySQL","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.3.6-23.el5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"qt-ODBC","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.3.6-23.el5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"qt-PostgreSQL","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.3.6-23.el5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"qt-config","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.3.6-23.el5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"qt-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.3.6-23.el5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"qt-designer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.3.6-23.el5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"qt-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.3.6-23.el5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"qt-devel-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.3.6-23.el5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::as","package":"kdelibs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6:3.3.1-9.el4"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::as","package":"kdelibs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6:3.3.1-9.el4"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::as","package":"kdelibs-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6:3.3.1-9.el4"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"kdelibs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6:3.3.1-9.el4"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"kdelibs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6:3.3.1-9.el4"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"kdelibs-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6:3.3.1-9.el4"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::es","package":"kdelibs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6:3.3.1-9.el4"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::es","package":"kdelibs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6:3.3.1-9.el4"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::es","package":"kdelibs-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6:3.3.1-9.el4"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::ws","package":"kdelibs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6:3.3.1-9.el4"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::ws","package":"kdelibs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6:3.3.1-9.el4"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::ws","package":"kdelibs-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6:3.3.1-9.el4"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client_workstation","package":"kdelibs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6:3.5.4-13.el5"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client_workstation","package":"kdelibs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6:3.5.4-13.el5"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client_workstation","package":"kdelibs-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6:3.5.4-13.el5"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"kdelibs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6:3.5.4-13.el5"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"kdelibs-apidocs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6:3.5.4-13.el5"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"kdelibs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6:3.5.4-13.el5"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"kdelibs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6:3.5.4-13.el5"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"kdelibs-apidocs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6:3.5.4-13.el5"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"kdelibs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6:3.5.4-13.el5"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"kdelibs-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6:3.5.4-13.el5"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"qt4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.1-1.el5_7.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"qt4-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.1-1.el5_7.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"qt4-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.1-1.el5_7.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"qt4-mysql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.1-1.el5_7.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"qt4-odbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.1-1.el5_7.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"qt4-postgresql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.1-1.el5_7.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"qt4-sqlite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.1-1.el5_7.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client_workstation","package":"qt4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.1-1.el5_7.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client_workstation","package":"qt4-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.1-1.el5_7.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client_workstation","package":"qt4-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.1-1.el5_7.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"qt4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.1-1.el5_7.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"qt4-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.1-1.el5_7.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"qt4-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.1-1.el5_7.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"qt4-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.1-1.el5_7.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"qt4-mysql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.1-1.el5_7.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"qt4-odbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.1-1.el5_7.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"qt4-postgresql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.1-1.el5_7.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"qt4-sqlite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.1-1.el5_7.1"}]}],"bundled":2}],"products":[{"vendor":"qt","product":"qt"}],"references":[{"url":"http://support.novell.com/techcenter/psdb/39ea4b325a7da742cb8b6995fa585b14.html","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/33397","tags":["vdb-entry","x_refsource_XF","x_transferred"]},{"url":"http://secunia.com/advisories/24699","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"http://www.redhat.com/support/errata/RHSA-2007-0909.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2007:074","tags":["vendor-advisory","x_refsource_MANDRIVA","x_transferred"]},{"url":"https://issues.rpath.com/browse/RPL-1202","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2007:076","tags":["vendor-advisory","x_refsource_MANDRIVA","x_transferred"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2007-424.htm","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://secunia.com/advisories/24889","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"http://secunia.com/advisories/27275","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"http://secunia.com/advisories/24727","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"http://secunia.com/advisories/26857","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"http://www.trolltech.com/company/newsroom/announcements/press.2007-03-30.9172215350","tags":["x_refsource_CONFIRM","x_transferred","Patch"]},{"url":"http://www.novell.com/linux/security/advisories/2007_6_sr.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred"]},{"url":"http://www.nabble.com/Bug-417390:-CVE-2007-0242%2C--Qt-UTF-8-overlong-sequence-decoding-vulnerability-t3506065.html","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://www.debian.org/security/2007/dsa-1292","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred"]},{"url":"http://secunia.com/advisories/24847","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"http://secunia.com/advisories/24705","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"http://rhn.redhat.com/errata/RHSA-2011-1324.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"http://www.securityfocus.com/bid/23269","tags":["vdb-entry","x_refsource_BID","x_transferred"]},{"url":"http://secunia.com/advisories/46117","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"http://secunia.com/advisories/27108","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"http://secunia.com/advisories/24759","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"http://www.ubuntu.com/usn/usn-452-1","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred"]},{"url":"http://secunia.com/advisories/24726","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20070901-01-P.asc","tags":["vendor-advisory","x_refsource_SGI","x_transferred"]},{"url":"http://www.vupen.com/english/advisories/2007/1212","tags":["vdb-entry","x_refsource_VUPEN","x_transferred"]},{"url":"http://secunia.com/advisories/25263","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"http://secunia.com/advisories/26804","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"http://fedoranews.org/updates/FEDORA-2007-703.shtml","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11510","tags":["vdb-entry","signature","x_refsource_OVAL","x_transferred"]},{"url":"http://www.redhat.com/support/errata/RHSA-2007-0883.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"http://slackware.com/security/viewer.php?l=slackware-security\u0026y=2007\u0026m=slackware-security.348591","tags":["vendor-advisory","x_refsource_SLACKWARE","x_transferred"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2007:075","tags":["vendor-advisory","x_refsource_MANDRIVA","x_transferred"]},{"url":"http://support.novell.com/techcenter/psdb/fc79b7f48d739f9c803a24ddad933384.html","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://secunia.com/advisories/24797","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2007-0242","tags":["advisory"]},{"url":"http://www.nabble.com/Bug-417390:-CVE-2007-0242,--Qt-UTF-8-overlong-sequence-decoding-vulnerability-t3506065.html"},{"url":"https://github.com/advisories/GHSA-4hj5-9h7j-98c6"},{"url":"https://access.redhat.com/errata/RHSA-2007:0883","tags":["advisory"]},{"url":"http://www.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=234633","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=269001","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2007/rhsa-2007_0883.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2007-0242","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2007-0242","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2007-4137","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2007-4137","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2007-4137","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2007:0909","tags":["advisory"]},{"url":"http://www.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=229606","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=233592","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=248537","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=251708","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=299891","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2007/rhsa-2007_0909.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2007-0537","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2007-0537","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2007-0537","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2007-1308","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2007-1308","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2007-1308","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2007-1564","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2007-1564","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2007-1564","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2007-3820","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2007-3820","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2007-3820","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2007-4224","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2007-4224","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2007-4224","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2011:1324","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=733118","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2011/rhsa-2011_1324.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2011-3193","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2011-3193","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2011-3193","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2007-0242","description":"The UTF-8 decoder in codecs/qutfcodec.cpp in Qt 3.3.8 and 4.2.3 does not reject long UTF-8 sequences as required by the standard, which allows remote attackers to conduct cross-site scripting (XSS) and directory traversal attacks via long sequences that decode to dangerous metacharacters.","status":"published","published":"2007-04-03T16:00:00Z","modified":"2024-08-07T12:12:17.982Z","updated_at":"2026-11-02T13:34:26.24368Z"}],"euvd":[{"id":"EUVD-2007-0244","description":"The UTF-8 decoder in codecs/qutfcodec.cpp in Qt 3.3.8 and 4.2.3 does not reject long UTF-8 sequences as required by the standard, which allows remote attackers to conduct cross-site scripting (XSS) and directory traversal attacks via long sequences that decode to dangerous metacharacters.","status":"published","published":"2007-04-03T16:00:00Z","modified":"2024-08-07T12:12:17Z","updated_at":"2026-11-03T01:38:31.603486Z"}],"ghsa":[{"id":"GHSA-4hj5-9h7j-98c6","title":"The UTF-8 decoder in codecs/qutfcodec.cpp in Qt 3.3.8 and 4.2.3 does not reject long UTF-8...","description":"The UTF-8 decoder in codecs/qutfcodec.cpp in Qt 3.3.8 and 4.2.3 does not reject long UTF-8 sequences as required by the standard, which allows remote attackers to conduct cross-site scripting (XSS) and directory traversal attacks via long sequences that decode to dangerous metacharacters.","status":"published","published":"2022-05-03T03:17:52Z","modified":"2023-02-01T05:01:26Z","updated_at":"2026-11-02T14:49:43.293288Z"}],"nvd":[{"id":"CVE-2007-0242","description":"The UTF-8 decoder in codecs/qutfcodec.cpp in Qt 3.3.8 and 4.2.3 does not reject long UTF-8 sequences as required by the standard, which allows remote attackers to conduct cross-site scripting (XSS) and directory traversal attacks via long sequences that decode to dangerous metacharacters.","status":"published","published":"2007-04-03T16:19:00Z","modified":"2026-06-16T22:35:11.433Z","cvss":[{"version":"2.0","score":4.3,"vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","level":"medium","assessor":"primary"}],"updated_at":"2026-11-02T14:01:14.732044Z"}],"osv":[{"id":"DSA-1292-1","title":"qt4-x11","status":"published","published":"2007-05-15T00:00:00Z","modified":"2026-03-09T01:01:07.74261Z","updated_at":"2026-11-02T15:46:14.285228Z"},{"id":"RHSA-2007:0883","title":"Red Hat Security Advisory: qt security update","status":"published","published":"2024-09-15T16:56:37Z","modified":"2026-06-26T12:18:03.601564882Z","updated_at":"2026-11-02T15:52:59.70892Z"},{"id":"RHSA-2007:0909","title":"Red Hat Security Advisory: kdelibs security update","status":"published","published":"2024-09-15T16:56:48Z","modified":"2026-06-26T12:17:43.736357439Z","updated_at":"2026-11-02T15:52:59.70892Z"},{"id":"RHSA-2011:1324","title":"Red Hat Security Advisory: qt4 security update","status":"published","published":"2024-09-15T19:27:22Z","modified":"2026-06-26T12:21:39.172932136Z","updated_at":"2026-11-02T15:53:01.003286Z"}]}}