Description
Multiple format string vulnerabilities in (1) qtextedit.cpp, (2) qdatatable.cpp, (3) qsqldatabase.cpp, (4) qsqlindex.cpp, (5) qsqlrecord.cpp, (6) qglobal.cpp, and (7) qsvgdevice.cpp in QTextEdit in Trolltech Qt 3 before 3.3.8 20070727 allow remote attackers to execute arbitrary code via format string specifiers in text used to compose an error message.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 4.0 | qt-x11-free | 3:3.3.7-4etch1 | DSA-1426-1 |
| Debian 3.1 | qt-x11-free | 3:3.3.4-3sarge3 | DSA-1426-1 |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 5 | qt +7 | 1:3.3.6-21.el5 | RHSA-2007:0721 |
| RHEL 4 | qt +6 | 1:3.3.3-11.RHEL4 | RHSA-2007:0721 |
| RHEL 3 | qt +5 | 1:3.1.2-16.RHEL3 | RHSA-2007:0721 |
Advisories 2
- RHSA-2007:0721 Red Hat Security Advisory: qt security update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- DSA-1426-1 qt-x11-free - several vulnerabilities Debian Security (DSA / DLA) · Mar 9, 2026
References
- https://issues.rpath.com/browse/RPL-1597
- 1018485 vdb-entry
- 26385 third-party-advisory
- http://trolltech.com/company/newsroom/announcements/press.2007-07-27.7503755960
- 26298 third-party-advisory
- GLSA-200710-28 vendor-advisory
- USN-495-1 vendor-advisory
- http://support.avaya.com/elmodocs2/security/ASA-2007-388.htm
- ADV-2007-2733 vdb-entry
- SUSE-SA:2007:048 vendor-advisory
- 26284 third-party-advisory
- MDKSA-2007:151 vendor-advisory
- 27996 third-party-advisory
- http://dist.trolltech.com/developer/download/170529.diff
- 26882 third-party-advisory
- 26607 third-party-advisory
- 26264 third-party-advisory
- GLSA-200708-16 vendor-advisory
- 26291 third-party-advisory
- 24460 third-party-advisory
- 26306 third-party-advisory
- 26804 third-party-advisory
- 25154 vdb-entry
- 20070803 FLEA-2007-0042-1 qt mailing-list
- 26852 third-party-advisory
- http://bugs.gentoo.org/show_bug.cgi?id=185446
- FEDORA-2007-703 vendor-advisory
- FEDORA-2007-2216 vendor-advisory
- GLSA-200712-08 vendor-advisory
- 28021 third-party-advisory
- RHSA-2007:0721 vendor-advisory
- oval:org.mitre.oval:def:9690 vdb-entry signature
- 26295 third-party-advisory
- SSA:2007-222-03 vendor-advisory
- DSA-1426 vendor-advisory