BDU:2015-03015

Опубликовано: 01 янв. 2015

Источник: fstec

CVSS2: 7.5

EPSS Низкий

Описание

Множественные уязвимости пакета qt3-examples операционной системы Debian GNU/Linux, эксплуатация которых может привести к нарушению конфиденциальности, целостности и доступности защищаемой информации. Эксплуатация уязвимостей может быть осуществлена удаленно

Вендор

Сообщество свободного программного обеспечения

Наименование ПО

Debian GNU/Linux

Версия ПО

до 4 (Debian GNU/Linux)

Тип ПО

Операционная система

Операционные системы и аппаратные платформы

Уровень опасности уязвимости

Высокий уровень опасности (базовая оценка CVSS 2.0 составляет 7,5)

Возможные меры по устранению уязвимости

Проблема может быть решена обновлением операционной системы до следующих версий пакетов в зависимости от архитектуры:

Debian GNU/Linux 4:

ppc:

qt3-qtconfig - 3.3.7-4etch1

libqt3-compat-headers - 3.3.7-4etch1

libqt3-mt-psql - 3.3.7-4etch1

libqt3-mt-sqlite - 3.3.7-4etch1

libqt3-mt-odbc - 3.3.7-4etch1

qt3-apps-dev - 3.3.7-4etch1

libqt3-mt-dev - 3.3.7-4etch1

libqt3-mt-mysql - 3.3.7-4etch1

libqt3-mt - 3.3.7-4etch1

libqt3-headers - 3.3.7-4etch1

qt3-dev-tools - 3.3.7-4etch1

qt3-designer - 3.3.7-4etch1

qt3-assistant - 3.3.7-4etch1

qt-x11-free-dbg - 3.3.7-4etch1

qt3-dev-tools-compat - 3.3.7-4etch1

qt3-dev-tools-embedded - 3.3.7-4etch1

qt3-linguist - 3.3.7-4etch1

s390x:

libqt3-mt-psql - 3.3.7-4etch1

libqt3-headers - 3.3.7-4etch1

libqt3-mt-odbc - 3.3.7-4etch1

libqt3-mt-dev - 3.3.7-4etch1

qt3-linguist - 3.3.7-4etch1

qt-x11-free-dbg - 3.3.7-4etch1

libqt3-mt-sqlite - 3.3.7-4etch1

libqt3-compat-headers - 3.3.7-4etch1

libqt3-mt-mysql - 3.3.7-4etch1

qt3-designer - 3.3.7-4etch1

libqt3-mt - 3.3.7-4etch1

qt3-dev-tools - 3.3.7-4etch1

qt3-qtconfig - 3.3.7-4etch1

qt3-apps-dev - 3.3.7-4etch1

qt3-assistant - 3.3.7-4etch1

qt3-dev-tools-embedded - 3.3.7-4etch1

qt3-dev-tools-compat - 3.3.7-4etch1

i686:

qt3-assistant - 3.3.7-4etch1

qt3-apps-dev - 3.3.7-4etch1

qt3-dev-tools-compat - 3.3.7-4etch1

libqt3-mt-mysql - 3.3.7-4etch1

libqt3-mt-odbc - 3.3.7-4etch1

qt3-dev-tools-embedded - 3.3.7-4etch1

qt3-designer - 3.3.7-4etch1

qt3-qtconfig - 3.3.7-4etch1

libqt3-compat-headers - 3.3.7-4etch1

qt3-dev-tools - 3.3.7-4etch1

libqt3-mt - 3.3.7-4etch1

libqt3-headers - 3.3.7-4etch1

qt3-linguist - 3.3.7-4etch1

libqt3-mt-psql - 3.3.7-4etch1

qt-x11-free-dbg - 3.3.7-4etch1

libqt3-mt-dev - 3.3.7-4etch1

libqt3-mt-sqlite - 3.3.7-4etch1

libqt3-mt-ibase - 3.3.7-4etch1

hppa:

libqt3-mt-mysql - 3.3.7-4etch1

qt3-dev-tools-embedded - 3.3.7-4etch1

qt3-linguist - 3.3.7-4etch1

libqt3-mt-sqlite - 3.3.7-4etch1

qt3-dev-tools-compat - 3.3.7-4etch1

libqt3-mt - 3.3.7-4etch1

libqt3-compat-headers - 3.3.7-4etch1

qt-x11-free-dbg - 3.3.7-4etch1

qt3-dev-tools - 3.3.7-4etch1

libqt3-mt-dev - 3.3.7-4etch1

qt3-designer - 3.3.7-4etch1

qt3-apps-dev - 3.3.7-4etch1

qt3-assistant - 3.3.7-4etch1

libqt3-headers - 3.3.7-4etch1

libqt3-mt-odbc - 3.3.7-4etch1

libqt3-mt-psql - 3.3.7-4etch1

qt3-qtconfig - 3.3.7-4etch1

sparc:

qt3-designer - 3.3.7-4etch1

libqt3-mt-sqlite - 3.3.7-4etch1

qt-x11-free-dbg - 3.3.7-4etch1

libqt3-mt-psql - 3.3.7-4etch1

libqt3-headers - 3.3.7-4etch1

qt3-apps-dev - 3.3.7-4etch1

qt3-dev-tools-compat - 3.3.7-4etch1

libqt3-mt-dev - 3.3.7-4etch1

libqt3-mt-odbc - 3.3.7-4etch1

qt3-assistant - 3.3.7-4etch1

qt3-dev-tools-embedded - 3.3.7-4etch1

libqt3-compat-headers - 3.3.7-4etch1

libqt3-mt - 3.3.7-4etch1

qt3-dev-tools - 3.3.7-4etch1

qt3-linguist - 3.3.7-4etch1

libqt3-mt-mysql - 3.3.7-4etch1

qt3-qtconfig - 3.3.7-4etch1

x86-64:

libqt3-mt - 3.3.7-4etch1

libqt3-compat-headers - 3.3.7-4etch1

qt3-dev-tools-compat - 3.3.7-4etch1

qt-x11-free-dbg - 3.3.7-4etch1

qt3-dev-tools - 3.3.7-4etch1

qt3-designer - 3.3.7-4etch1

libqt3-mt-dev - 3.3.7-4etch1

qt3-dev-tools-embedded - 3.3.7-4etch1

qt3-assistant - 3.3.7-4etch1

qt3-linguist - 3.3.7-4etch1

qt3-apps-dev - 3.3.7-4etch1

qt3-qtconfig - 3.3.7-4etch1

libqt3-mt-ibase - 3.3.7-4etch1

libqt3-mt-odbc - 3.3.7-4etch1

libqt3-headers - 3.3.7-4etch1

libqt3-mt-mysql - 3.3.7-4etch1

libqt3-mt-psql - 3.3.7-4etch1

libqt3-mt-sqlite - 3.3.7-4etch1

alpha:

qt3-dev-tools-embedded - 3.3.7-4etch1

libqt3-mt-odbc - 3.3.7-4etch1

libqt3-mt-dev - 3.3.7-4etch1

qt3-dev-tools-compat - 3.3.7-4etch1

qt3-linguist - 3.3.7-4etch1

qt3-designer - 3.3.7-4etch1

libqt3-headers - 3.3.7-4etch1

libqt3-mt-psql - 3.3.7-4etch1

qt3-qtconfig - 3.3.7-4etch1

qt3-assistant - 3.3.7-4etch1

libqt3-mt-sqlite - 3.3.7-4etch1

qt3-apps-dev - 3.3.7-4etch1

qt-x11-free-dbg - 3.3.7-4etch1

libqt3-mt-mysql - 3.3.7-4etch1

libqt3-mt - 3.3.7-4etch1

libqt3-compat-headers - 3.3.7-4etch1

qt3-dev-tools - 3.3.7-4etch1

ia64:

libqt3-headers - 3.3.7-4etch1

qt3-qtconfig - 3.3.7-4etch1

libqt3-compat-headers - 3.3.7-4etch1

qt3-dev-tools-compat - 3.3.7-4etch1

qt-x11-free-dbg - 3.3.7-4etch1

qt3-dev-tools - 3.3.7-4etch1

libqt3-mt-mysql - 3.3.7-4etch1

qt3-designer - 3.3.7-4etch1

libqt3-mt-dev - 3.3.7-4etch1

libqt3-mt - 3.3.7-4etch1

libqt3-mt-sqlite - 3.3.7-4etch1

qt3-dev-tools-embedded - 3.3.7-4etch1

libqt3-mt-psql - 3.3.7-4etch1

libqt3-mt-odbc - 3.3.7-4etch1

qt3-linguist - 3.3.7-4etch1

qt3-assistant - 3.3.7-4etch1

qt3-apps-dev - 3.3.7-4etch1

mips:

libqt3-mt-psql - 3.3.7-4etch1

libqt3-compat-headers - 3.3.7-4etch1

libqt3-mt-dev - 3.3.7-4etch1

qt3-linguist - 3.3.7-4etch1

qt3-dev-tools - 3.3.7-4etch1

qt-x11-free-dbg - 3.3.7-4etch1

libqt3-headers - 3.3.7-4etch1

qt3-dev-tools-compat - 3.3.7-4etch1

qt3-dev-tools-embedded - 3.3.7-4etch1

qt3-qtconfig - 3.3.7-4etch1

libqt3-mt - 3.3.7-4etch1

qt3-designer - 3.3.7-4etch1

libqt3-mt-odbc - 3.3.7-4etch1

libqt3-mt-mysql - 3.3.7-4etch1

libqt3-mt-sqlite - 3.3.7-4etch1

qt3-apps-dev - 3.3.7-4etch1

qt3-assistant - 3.3.7-4etch1

noarch:

qt3-examples - 3.3.7-4etch1

qt3-doc - 3.3.7-4etch1

libqt3-i18n - 3.3.7-4etch1

mipsel:

libqt3-mt-dev - 3.3.7-4etch1

libqt3-mt-sqlite - 3.3.7-4etch1

qt3-assistant - 3.3.7-4etch1

qt3-apps-dev - 3.3.7-4etch1

libqt3-headers - 3.3.7-4etch1

libqt3-mt-psql - 3.3.7-4etch1

libqt3-compat-headers - 3.3.7-4etch1

libqt3-mt-mysql - 3.3.7-4etch1

qt3-linguist - 3.3.7-4etch1

qt3-dev-tools-embedded - 3.3.7-4etch1

libqt3-mt-odbc - 3.3.7-4etch1

qt3-dev-tools-compat - 3.3.7-4etch1

qt3-dev-tools - 3.3.7-4etch1

qt-x11-free-dbg - 3.3.7-4etch1

qt3-qtconfig - 3.3.7-4etch1

qt3-designer - 3.3.7-4etch1

libqt3-mt - 3.3.7-4etch1

arm:

qt3-dev-tools-embedded - 3.3.7-4etch1

libqt3-mt-psql - 3.3.7-4etch1

qt3-apps-dev - 3.3.7-4etch1

qt-x11-free-dbg - 3.3.7-4etch1

qt3-assistant - 3.3.7-4etch1

qt3-linguist - 3.3.7-4etch1

libqt3-mt-sqlite - 3.3.7-4etch1

qt3-dev-tools-compat - 3.3.7-4etch1

libqt3-headers - 3.3.7-4etch1

qt3-dev-tools - 3.3.7-4etch1

libqt3-compat-headers - 3.3.7-4etch1

qt3-qtconfig - 3.3.7-4etch1

libqt3-mt-mysql - 3.3.7-4etch1

libqt3-mt - 3.3.7-4etch1

qt3-designer - 3.3.7-4etch1

libqt3-mt-dev - 3.3.7-4etch1

libqt3-mt-odbc - 3.3.7-4etch1

Debian GNU/Linux 3.1:

ppc:

libqt3c102-odbc - 3.3.4-3sarge3

libqt3c102-sqlite - 3.3.4-3sarge3

qt3-dev-tools-embedded - 3.3.4-3sarge3

libqt3c102-mt-psql - 3.3.4-3sarge3

libqt3-dev - 3.3.4-3sarge3

libqt3c102-mt-odbc - 3.3.4-3sarge3

qt3-linguist - 3.3.4-3sarge3

libqt3-headers - 3.3.4-3sarge3

libqt3c102-mt-mysql - 3.3.4-3sarge3

libqt3c102-mysql - 3.3.4-3sarge3

qt3-dev-tools-compat - 3.3.4-3sarge3

libqt3-compat-headers - 3.3.4-3sarge3

libqt3c102-psql - 3.3.4-3sarge3

libqt3c102-mt-sqlite - 3.3.4-3sarge3

qt3-qtconfig - 3.3.4-3sarge3

qt3-designer - 3.3.4-3sarge3

libqt3c102-mt - 3.3.4-3sarge3

qt3-dev-tools - 3.3.4-3sarge3

libqt3c102 - 3.3.4-3sarge3

libqt3-mt-dev - 3.3.4-3sarge3

qt3-assistant - 3.3.4-3sarge3

qt3-apps-dev - 3.3.4-3sarge3

s390x:

qt3-qtconfig - 3.3.4-3sarge3

libqt3c102-mt-psql - 3.3.4-3sarge3

libqt3c102-mt-odbc - 3.3.4-3sarge3

libqt3c102 - 3.3.4-3sarge3

libqt3c102-odbc - 3.3.4-3sarge3

libqt3-mt-dev - 3.3.4-3sarge3

qt3-dev-tools-compat - 3.3.4-3sarge3

qt3-dev-tools - 3.3.4-3sarge3

qt3-linguist - 3.3.4-3sarge3

libqt3c102-mt - 3.3.4-3sarge3

libqt3-headers - 3.3.4-3sarge3

qt3-apps-dev - 3.3.4-3sarge3

libqt3-compat-headers - 3.3.4-3sarge3

libqt3c102-psql - 3.3.4-3sarge3

qt3-assistant - 3.3.4-3sarge3

libqt3c102-sqlite - 3.3.4-3sarge3

qt3-designer - 3.3.4-3sarge3

qt3-dev-tools-embedded - 3.3.4-3sarge3

libqt3c102-mysql - 3.3.4-3sarge3

libqt3-dev - 3.3.4-3sarge3

libqt3c102-mt-mysql - 3.3.4-3sarge3

libqt3c102-mt-sqlite - 3.3.4-3sarg

Статус уязвимости

Подтверждена производителем

Наличие эксплойта

Данные уточняются

Информация об устранении

Уязвимость устранена

Ссылки на источники

Идентификаторы других систем описаний уязвимостей

EPSS

Процентиль: 92%

0.08384

Низкий

7.5 High

CVSS2

Связанные уязвимости

CVE-2007-3388

ubuntu

почти 18 лет назад

Multiple format string vulnerabilities in (1) qtextedit.cpp, (2) qdatatable.cpp, (3) qsqldatabase.cpp, (4) qsqlindex.cpp, (5) qsqlrecord.cpp, (6) qglobal.cpp, and (7) qsvgdevice.cpp in QTextEdit in Trolltech Qt 3 before 3.3.8 20070727 allow remote attackers to execute arbitrary code via format string specifiers in text used to compose an error message.