BDU:2015-02905

Опубликовано: 13 мая 2009

Источник: fstec

CVSS2: 9.3

EPSS Средний

Описание

Множественные уязвимости пакета libqt4-core операционной системы Debian GNU/Linux, эксплуатация которых может привести к нарушению конфиденциальности, целостности и доступности защищаемой информации. Эксплуатация уязвимостей может быть осуществлена удаленно

Вендор

Сообщество свободного программного обеспечения

Наименование ПО

Debian GNU/Linux

Версия ПО

до 5 (Debian GNU/Linux)

Тип ПО

Операционная система

Операционные системы и аппаратные платформы

Уровень опасности уязвимости

Высокий уровень опасности (базовая оценка CVSS 2.0 составляет 9,3)

Возможные меры по устранению уязвимости

Проблема может быть решена обновлением операционной системы до следующих версий пакетов в зависимости от архитектуры:

Debian GNU/Linux 5:

ppc:

libqt4-xmlpatterns-dbg - 4.4.3-1+lenny1

qt4-qtconfig - 4.4.3-1+lenny1

libqt4-opengl-dev - 4.4.3-1+lenny1

libqt4-dev - 4.4.3-1+lenny1

libqt4-opengl - 4.4.3-1+lenny1

libqt4-sql-mysql - 4.4.3-1+lenny1

libqt4-core - 4.4.3-1+lenny1

libqtcore4 - 4.4.3-1+lenny1

libqt4-assistant - 4.4.3-1+lenny1

libqt4-dbg - 4.4.3-1+lenny1

libqt4-designer - 4.4.3-1+lenny1

libqt4-sql-ibase - 4.4.3-1+lenny1

libqt4-test - 4.4.3-1+lenny1

libqt4-dbus - 4.4.3-1+lenny1

libqtgui4 - 4.4.3-1+lenny1

libqt4-sql - 4.4.3-1+lenny1

libqt4-webkit - 4.4.3-1+lenny1

libqt4-script - 4.4.3-1+lenny1

libqt4-xml - 4.4.3-1+lenny1

libqt4-sql-odbc - 4.4.3-1+lenny1

libqt4-network - 4.4.3-1+lenny1

qt4-dev-tools - 4.4.3-1+lenny1

libqt4-sql-sqlite2 - 4.4.3-1+lenny1

libqt4-svg - 4.4.3-1+lenny1

libqt4-webkit-dbg - 4.4.3-1+lenny1

libqt4-help - 4.4.3-1+lenny1

libqt4-gui - 4.4.3-1+lenny1

libqt4-sql-sqlite - 4.4.3-1+lenny1

libqt4-xmlpatterns - 4.4.3-1+lenny1

qt4-designer - 4.4.3-1+lenny1

qt4-demos - 4.4.3-1+lenny1

qt4-qmake - 4.4.3-1+lenny1

libqt4-qt3support - 4.4.3-1+lenny1

libqt4-sql-psql - 4.4.3-1+lenny1

s390x:

libqt4-xmlpatterns - 4.4.3-1+lenny1

libqt4-assistant - 4.4.3-1+lenny1

libqtgui4 - 4.4.3-1+lenny1

libqt4-svg - 4.4.3-1+lenny1

libqt4-dbus - 4.4.3-1+lenny1

libqt4-dev - 4.4.3-1+lenny1

libqt4-webkit-dbg - 4.4.3-1+lenny1

libqt4-sql-psql - 4.4.3-1+lenny1

qt4-dev-tools - 4.4.3-1+lenny1

qt4-demos - 4.4.3-1+lenny1

libqt4-opengl - 4.4.3-1+lenny1

libqt4-sql-sqlite2 - 4.4.3-1+lenny1

libqt4-sql-odbc - 4.4.3-1+lenny1

libqt4-script - 4.4.3-1+lenny1

libqt4-qt3support - 4.4.3-1+lenny1

qt4-qmake - 4.4.3-1+lenny1

libqt4-xmlpatterns-dbg - 4.4.3-1+lenny1

libqt4-xml - 4.4.3-1+lenny1

libqt4-core - 4.4.3-1+lenny1

qt4-designer - 4.4.3-1+lenny1

libqt4-gui - 4.4.3-1+lenny1

libqtcore4 - 4.4.3-1+lenny1

libqt4-dbg - 4.4.3-1+lenny1

libqt4-test - 4.4.3-1+lenny1

libqt4-designer - 4.4.3-1+lenny1

libqt4-sql - 4.4.3-1+lenny1

libqt4-opengl-dev - 4.4.3-1+lenny1

libqt4-sql-mysql - 4.4.3-1+lenny1

qt4-qtconfig - 4.4.3-1+lenny1

libqt4-help - 4.4.3-1+lenny1

libqt4-sql-sqlite - 4.4.3-1+lenny1

libqt4-webkit - 4.4.3-1+lenny1

libqt4-network - 4.4.3-1+lenny1

i686:

libqt4-test - 4.4.3-1+lenny1

libqtgui4 - 4.4.3-1+lenny1

libqt4-dbg - 4.4.3-1+lenny1

libqt4-sql-sqlite - 4.4.3-1+lenny1

qt4-dev-tools - 4.4.3-1+lenny1

libqt4-opengl-dev - 4.4.3-1+lenny1

libqt4-gui - 4.4.3-1+lenny1

qt4-qtconfig - 4.4.3-1+lenny1

qt4-qmake - 4.4.3-1+lenny1

libqt4-sql - 4.4.3-1+lenny1

libqt4-assistant - 4.4.3-1+lenny1

libqt4-script - 4.4.3-1+lenny1

libqt4-xmlpatterns - 4.4.3-1+lenny1

libqt4-network - 4.4.3-1+lenny1

qt4-demos - 4.4.3-1+lenny1

libqt4-webkit - 4.4.3-1+lenny1

libqt4-sql-psql - 4.4.3-1+lenny1

libqt4-svg - 4.4.3-1+lenny1

libqtcore4 - 4.4.3-1+lenny1

libqt4-qt3support - 4.4.3-1+lenny1

libqt4-webkit-dbg - 4.4.3-1+lenny1

libqt4-core - 4.4.3-1+lenny1

libqt4-opengl - 4.4.3-1+lenny1

libqt4-sql-ibase - 4.4.3-1+lenny1

libqt4-help - 4.4.3-1+lenny1

libqt4-dev - 4.4.3-1+lenny1

libqt4-sql-mysql - 4.4.3-1+lenny1

libqt4-xml - 4.4.3-1+lenny1

libqt4-sql-sqlite2 - 4.4.3-1+lenny1

libqt4-xmlpatterns-dbg - 4.4.3-1+lenny1

qt4-designer - 4.4.3-1+lenny1

libqt4-designer - 4.4.3-1+lenny1

libqt4-sql-odbc - 4.4.3-1+lenny1

libqt4-dbus - 4.4.3-1+lenny1

sparc:

qt4-qmake - 4.4.3-1+lenny1

libqt4-xmlpatterns-dbg - 4.4.3-1+lenny1

libqt4-sql - 4.4.3-1+lenny1

libqt4-xml - 4.4.3-1+lenny1

libqt4-sql-psql - 4.4.3-1+lenny1

libqt4-dbg - 4.4.3-1+lenny1

libqt4-dbus - 4.4.3-1+lenny1

libqt4-help - 4.4.3-1+lenny1

libqt4-sql-ibase - 4.4.3-1+lenny1

qt4-designer - 4.4.3-1+lenny1

libqtcore4 - 4.4.3-1+lenny1

libqt4-svg - 4.4.3-1+lenny1

libqt4-webkit-dbg - 4.4.3-1+lenny1

libqt4-sql-sqlite - 4.4.3-1+lenny1

libqt4-sql-sqlite2 - 4.4.3-1+lenny1

libqt4-test - 4.4.3-1+lenny1

libqt4-core - 4.4.3-1+lenny1

qt4-dev-tools - 4.4.3-1+lenny1

qt4-demos - 4.4.3-1+lenny1

libqt4-qt3support - 4.4.3-1+lenny1

libqt4-webkit - 4.4.3-1+lenny1

libqt4-opengl - 4.4.3-1+lenny1

libqt4-sql-odbc - 4.4.3-1+lenny1

libqt4-script - 4.4.3-1+lenny1

libqtgui4 - 4.4.3-1+lenny1

libqt4-dev - 4.4.3-1+lenny1

libqt4-gui - 4.4.3-1+lenny1

libqt4-network - 4.4.3-1+lenny1

libqt4-designer - 4.4.3-1+lenny1

libqt4-assistant - 4.4.3-1+lenny1

qt4-qtconfig - 4.4.3-1+lenny1

libqt4-opengl-dev - 4.4.3-1+lenny1

libqt4-sql-mysql - 4.4.3-1+lenny1

libqt4-xmlpatterns - 4.4.3-1+lenny1

x86-64:

libqt4-sql-sqlite - 4.4.3-1+lenny1

libqt4-test - 4.4.3-1+lenny1

qt4-qtconfig - 4.4.3-1+lenny1

libqt4-script - 4.4.3-1+lenny1

libqt4-qt3support - 4.4.3-1+lenny1

libqt4-dbg - 4.4.3-1+lenny1

libqt4-sql-odbc - 4.4.3-1+lenny1

libqt4-network - 4.4.3-1+lenny1

qt4-demos - 4.4.3-1+lenny1

libqt4-opengl-dev - 4.4.3-1+lenny1

libqt4-sql-mysql - 4.4.3-1+lenny1

libqt4-gui - 4.4.3-1+lenny1

qt4-dev-tools - 4.4.3-1+lenny1

libqt4-designer - 4.4.3-1+lenny1

libqtgui4 - 4.4.3-1+lenny1

libqt4-core - 4.4.3-1+lenny1

libqt4-svg - 4.4.3-1+lenny1

libqt4-sql-psql - 4.4.3-1+lenny1

libqt4-webkit-dbg - 4.4.3-1+lenny1

libqt4-webkit - 4.4.3-1+lenny1

qt4-qmake - 4.4.3-1+lenny1

libqt4-assistant - 4.4.3-1+lenny1

libqt4-help - 4.4.3-1+lenny1

libqt4-dev - 4.4.3-1+lenny1

libqt4-opengl - 4.4.3-1+lenny1

libqt4-xmlpatterns - 4.4.3-1+lenny1

libqt4-xml - 4.4.3-1+lenny1

libqt4-sql-ibase - 4.4.3-1+lenny1

libqt4-sql-sqlite2 - 4.4.3-1+lenny1

libqtcore4 - 4.4.3-1+lenny1

qt4-designer - 4.4.3-1+lenny1

libqt4-xmlpatterns-dbg - 4.4.3-1+lenny1

libqt4-sql - 4.4.3-1+lenny1

libqt4-dbus - 4.4.3-1+lenny1

armel:

qt4-qmake - 4.4.3-1+lenny1

libqt4-help - 4.4.3-1+lenny1

libqtgui4 - 4.4.3-1+lenny1

libqt4-xmlpatterns-dbg - 4.4.3-1+lenny1

libqt4-core - 4.4.3-1+lenny1

libqt4-dev - 4.4.3-1+lenny1

qt4-dev-tools - 4.4.3-1+lenny1

libqtcore4 - 4.4.3-1+lenny1

libqt4-xmlpatterns - 4.4.3-1+lenny1

libqt4-opengl-dev - 4.4.3-1+lenny1

libqt4-sql-odbc - 4.4.3-1+lenny1

libqt4-svg - 4.4.3-1+lenny1

libqt4-sql-mysql - 4.4.3-1+lenny1

libqt4-test - 4.4.3-1+lenny1

libqt4-qt3support - 4.4.3-1+lenny1

libqt4-opengl - 4.4.3-1+lenny1

qt4-demos - 4.4.3-1+lenny1

libqt4-sql-sqlite - 4.4.3-1+lenny1

libqt4-gui - 4.4.3-1+lenny1

libqt4-sql - 4.4.3-1+lenny1

libqt4-script - 4.4.3-1+lenny1

libqt4-network - 4.4.3-1+lenny1

libqt4-webkit-dbg - 4.4.3-1+lenny1

libqt4-assistant - 4.4.3-1+lenny1

qt4-designer - 4.4.3-1+lenny1

libqt4-dbg - 4.4.3-1+lenny1

libqt4-designer - 4.4.3-1+lenny1

libqt4-sql-psql - 4.4.3-1+lenny1

libqt4-xml - 4.4.3-1+lenny1

libqt4-webkit - 4.4.3-1+lenny1

libqt4-sql-sqlite2 - 4.4.3-1+lenny1

qt4-qtconfig - 4.4.3-1+lenny1

libqt4-dbus - 4.4.3-1+lenny1

alpha:

libqt4-core - 4.4.3-1+lenny1

libqt4-dbus - 4.4.3-1+lenny1

libqt4-svg - 4.4.3-1+lenny1

libqt4-sql-psql - 4.4.3-1+lenny1

qt4-dev-tools - 4.4.3-1+lenny1

libqt4-webkit-dbg - 4.4.3-1+lenny1

libqt4-network - 4.4.3-1+lenny1

libqt4-dbg - 4.4.3-1+lenny1

libqtgui4 - 4.4.3-1+lenny1

libqt4-help - 4.4.3-1+lenny1

libqtcore4 - 4.4.3-1+lenny1

libqt4-sql-sqlite2 - 4.4.3-1+lenny1

libqt4-webkit - 4.4.3-1+lenny1

libqt4-xmlpatterns-dbg - 4.4.3-1+lenny1

libqt4-assistant - 4.4.3-1+lenny1

libqt4-qt3support - 4.4.3-1+lenny1

qt4-qmake - 4.4.3-1+lenny1

qt4-qtconfig - 4.4.3-1+lenny1

libqt4-dev - 4.4.3-1+lenny1

qt4-demos - 4.4.3-1+lenny1

libqt4-xmlpatterns - 4.4.3-1+lenny1

libqt4-opengl - 4.4.3-1+lenny1

libqt4-xml - 4.4.3-1+lenny1

libqt4-sql-odbc - 4.4.3-1+lenny1

libqt4-gui - 4.4.3-1+lenny1

libqt4-script - 4.4.3-1+lenny1

libqt4-designer - 4.4.3-1+lenny1

libqt4-sql-sqlite - 4.4.3-1+lenny1

qt4-designer - 4.4.3-1+lenny1

libqt4-test - 4.4.3-1+lenny1

libqt4-opengl-dev - 4.4.3-1+lenny1

libqt4-sql - 4.4.3-1+lenny1

libqt4-sql-mysql - 4.4.3-1+lenny1

ia64:

libqt4-xmlpatterns - 4.4.3-1+lenny1

libqt4-assistant - 4.4.3-1+lenny1

libqtgui4 - 4.4.3-1+lenny1

libqt4-gui - 4.4.3-1+lenny1

libqt4-test - 4.4.3-1+lenny1

libqt4-webkit-dbg - 4.4.3-1+lenny1

libqtcore4 - 4.4.3-1+lenny1

qt4-designer - 4.4.3-1+lenny1

libqt4-help - 4.4.3-1+lenny1

libqt4-designer - 4.4.3-1+lenny1

libqt4-sql-mysql - 4.4.3-1+lenny1

libqt4-opengl-dev - 4.4.3-1+lenny1

libqt4-sql-sqlite - 4.4.3-1+lenny1

libqt4-svg - 4.4.3-1+lenny1

libqt4-dbus - 4.4.3-1+lenny1

libqt4-xml - 4.4.3-1+lenny1

libqt4-dbg - 4.4.3-1+lenny1

libqt4-network - 4.4.3-1+lenny1

libqt4-sql - 4.4.3-1+lenny1

libqt4-sql-psql - 4.4.3-1+lenny1

qt4-demos - 4.4.3-1+lenny1

qt4-qtconfig - 4.4.3-1+lenny1

qt4-dev-tools - 4.4.3-1+lenny1

libqt4-webkit - 4.4.3-1+lenny1

libqt4-xmlpatterns-dbg - 4.4.3-1+lenny1

libqt4-opengl - 4.4.3-1+lenny1

libqt4-sql-odbc - 4.4.3-1+lenny1

libqt4-sql-sqlite2 - 4.4.3-1+lenny1

libqt4-script - 4.4.3-1+lenny1

libqt4-core - 4.4.3-1+lenny1

libqt4-qt3support - 4.4.3-1+lenny1

libqt4-dev - 4.4.3-1+lenny1

qt4-qmake - 4.4.3-1+lenny1

mips:

libqt4-xmlpatterns-dbg - 4.4.3-1+lenny1

libqt4-sql-psql - 4.4.3-1+lenny1

libqt4-network - 4.4.3-1+lenny1

libqt4-dbus - 4.4.3-1+lenny1

libqt4-sql-sqlite2 - 4.4.3-1+lenny1

libqtcore4 - 4.4.3-1+lenny1

libqt4-help - 4.4.3-1+lenny1

libqt4-core - 4.4.3-1+lenny1

libqt4-dev - 4.4.3-1+lenny1

qt4-qtconfig - 4.4.3-1+lenny1

libqt4-xml - 4.4.3-1+lenny1

libqt4-assistant - 4.4.3-1+lenny1

libqt4-webkit - 4.4.3-1+lenny1

libqt4-qt3support - 4.4.3-1+lenny1

libqt4-designer - 4.4.3-1+lenny1

qt4-dev-tools - 4.4.3-1+lenny1

libqt4-opengl - 4.4.3-1+lenny1

libqt4-svg - 4.4.3-1+lenny1

libqt4-gui - 4.4.3-1+lenny1

libqtgui4 - 4.4.3-1+lenny1

libqt4-sql-sqlite - 4.4.3-1+lenny1

libqt4-opengl-dev - 4.4.3-1+lenny1

qt4-demos - 4.4.3-1+lenny1

qt4-qmake - 4.4.3-1+lenny1

libqt4-xmlpatterns - 4.4.3-1+lenny1

libqt4-sql-mysql - 4.4.3-1+lenny1

libqt4-sql-odbc - 4.4.3-1+lenny1

libqt4-test - 4.4.3-1+lenny1

libqt4-script - 4.4.3-1+lenny1

libqt4-webkit-dbg - 4.4.3-1+lenny1

qt4-designer - 4.4.3-1+lenny1

libqt4-sql - 4.4.3-1+lenny1

libqt4-dbg - 4.4.3-1+lenny1

noarch:

qt4-doc - 4.4.3-1+lenny1

qt4-doc-html - 4.4.3-1+lenny1

mipsel:

libqt4-dbus - 4.4.3-1+lenny1

qt4-demos - 4.4.3-1+lenny1

libqt4-dev - 4.4.3-1+lenny1

libqt4-opengl - 4.4.3-1+lenny1

libqt4-assistant - 4.4.3-1+lenny1

libqt4-gui - 4.4.3-1+lenny1

libqt4-designer - 4.4.3-1+lenny1

libqt4-help - 4.4.3-1+lenny1

libqt4-xml - 4.4.3-1+lenny1

libqtgui4 - 4.4.3-1+lenny1

libqt4-sql-mysql - 4.4.3-1+lenny1

libqt4-core - 4.4.3-1+lenny1

libqt4-dbg - 4.4.3-1+lenny1

libqt4-sql - 4.4.3-1+lenny1

libqt4-webkit - 4.4.3-1+lenny1

libqt4-xmlpatterns - 4.4.3-1+lenny1

qt4-qtconfig - 4.4.3-1+lenny1

libqt4-test - 4.4.3-1+lenny1

libqt4-sql-odbc - 4.4.3-1+lenny1

qt4-qmake - 4.4.3-1+lenny1

libqt4-sql-sqlite - 4.4.3-1+lenny1

qt4-dev-tools - 4.4.3-1+lenny1

libqt4-script - 4.4.3-1+lenny1

libqt4-network - 4.4.3-1+lenny1

libqt4-xmlpatterns-dbg - 4.4.3-1+lenny1

libqt4-sql-sqlite2 - 4.4.3-1+lenny1

qt4-designer - 4.4.3-1+lenny1

libqt4-webkit-dbg - 4.4.3-1+lenny1

libqtcore4 - 4.4.3-1+lenny1

libqt4-sql-psql - 4.4.3-1+lenny1

libqt4-opengl-dev - 4.4.3-1+lenny1

libqt4-qt3support - 4.4.3-1+lenny1

libqt4-svg - 4.4.3-1+lenny1

hppa:

libqt4-sql-odbc - 4.4.3-1+lenny1

libqt4-script - 4.4.3-1+lenny1

libqt4-dbg - 4.4.3-1+lenny1

libqt4-xmlpatterns - 4.4.3-1+lenny1

libqt4-test - 4.4.3-1+lenny1

libqt4-xml - 4.4.3-1+lenny1

libqt4-help - 4.4.3-1+lenny1

libqt4-sql-sqlite - 4.4.3-1+lenny1

qt4-qtconfig - 4.4.3-1+lenny1

libqt4-dbus - 4.4.3-1+lenny1

libqt4-assistant - 4.4.3-1+lenny1

libqt4-network - 4.4.3-1+lenny1

qt4-qmake - 4.4.3-1+lenny1

qt4-demos - 4.4.3-1+lenny1

libqt4-sql-sqlite2 - 4.4.3-1+lenny1

libqt4-opengl-dev - 4.4.3-1+lenny1

libqtgui4 - 4.4.3-1+lenny1

libqt4-xmlpatterns-dbg - 4.4.3-1+lenny1

libqt4-qt3support - 4.4.3-1+lenny1

libqt4-dev - 4.4.3-1+lenny1

libqtcore4 - 4.4.3-1+lenny1

qt4-designer - 4.4.3-1+lenny1

libqt4-opengl - 4.4.3-1+lenny1

libqt4-webkit - 4.4.3-1+lenny1

libqt4-core - 4.4.3-1+lenny1

libqt4-webkit-dbg - 4.4.3-1+lenny1

libqt4-designer - 4.4.3-1+lenny1

qt4-dev-tools - 4.4.3-1+lenny1

libqt4-gui - 4.4.3-1+lenny1

libqt4-sql-psql - 4.4.3-1+lenny1

libqt4-sql-mysql - 4.4.3-1+lenny1

libqt4-svg - 4.4.3-1+lenny1

libqt4-sql - 4.4.3-1+lenny1

Статус уязвимости

Подтверждена производителем

Наличие эксплойта

Данные уточняются

Информация об устранении

Уязвимость устранена

Ссылки на источники

Идентификаторы других систем описаний уязвимостей

EPSS

Процентиль: 93%

0.11718

Средний

9.3 Critical

CVSS2

Связанные уязвимости

CVE-2009-0945

ubuntu

около 16 лет назад

Array index error in the insertItemBefore method in WebKit, as used in Apple Safari before 3.2.3 and 4 Public Beta, iPhone OS 1.0 through 2.2.1, iPhone OS for iPod touch 1.1 through 2.2.1, Google Chrome Stable before 1.0.154.65, and possibly other products allows remote attackers to execute arbitrary code via a document with a SVGPathList data structure containing a negative index in the (1) SVGTransformList, (2) SVGStringList, (3) SVGNumberList, (4) SVGPathSegList, (5) SVGPointList, or (6) SVGLengthList SVGList object, which triggers memory corruption.