Mandrake Linux Security Advisory : qt3 (MDKSA-2007:151)

medium Nessus Plugin ID 25835

Synopsis

The remote Mandrake Linux host is missing one or more security updates.

Description

A number of format string flaws have been discovered in how Qt handled error messages by Dirk Mueller and Tim Brown of Portcullis Computer Security. If an application linked against Qt created an error message from user-supplied data in a certain way, it could possibly lead to the execution of arbitrary code or a denial of service.

This update provides packages which are patched to prevent these issues.

Solution

Update the affected packages.

Plugin Details

Severity: Medium

ID: 25835

File Name: mandrake_MDKSA-2007-151.nasl

Version: 1.17

Type: local

Family: Mandriva Local Security Checks

Published: 8/2/2007

Updated: 1/6/2021

Supported Sensors: Nessus

Risk Information

VPR

Risk Factor: Medium

Score: 5.9

CVSS v2

Risk Factor: Medium

Base Score: 6.8

Temporal Score: 5.9

Vector: CVSS2#AV:N/AC:M/Au:N/C:P/I:P/A:P

Vulnerability Information

CPE: p-cpe:/a:mandriva:linux:libqt3-devel, p-cpe:/a:mandriva:linux:lib64qassistantclient1, p-cpe:/a:mandriva:linux:libqt3-mysql, p-cpe:/a:mandriva:linux:qt3-doc, p-cpe:/a:mandriva:linux:qt3-example, p-cpe:/a:mandriva:linux:lib64qt3, p-cpe:/a:mandriva:linux:libqt3, cpe:/o:mandriva:linux:2007, p-cpe:/a:mandriva:linux:lib64qt3-psql, p-cpe:/a:mandriva:linux:lib64designercore1, p-cpe:/a:mandriva:linux:libeditor1, p-cpe:/a:mandriva:linux:qt3-tutorial, p-cpe:/a:mandriva:linux:lib64qt3-static-devel, p-cpe:/a:mandriva:linux:lib64qt3-devel, p-cpe:/a:mandriva:linux:libqt3-odbc, p-cpe:/a:mandriva:linux:libqt3-sqlite, p-cpe:/a:mandriva:linux:libqassistantclient1, p-cpe:/a:mandriva:linux:libqt3-psql, p-cpe:/a:mandriva:linux:qt3-common, cpe:/o:mandriva:linux:2007.1, p-cpe:/a:mandriva:linux:lib64qt3-sqlite, p-cpe:/a:mandriva:linux:libqt3-static-devel, p-cpe:/a:mandriva:linux:libdesignercore1, p-cpe:/a:mandriva:linux:lib64qt3-mysql, p-cpe:/a:mandriva:linux:lib64editor1, p-cpe:/a:mandriva:linux:lib64qt3-odbc

Required KB Items: Host/local_checks_enabled, Host/cpu, Host/Mandrake/release, Host/Mandrake/rpm-list

Exploit Ease: No known exploits are available

Patch Publication Date: 8/1/2007

Reference Information

CVE: CVE-2007-3388

BID: 25154

MDKSA: 2007:151

Detections

Analytics