vulntracker.iovulntracker.io
© 2026 vulntracker.io

CVE-2007-4137

N/A
Published: September 18, 2007 at 07:00 PM UTC
Updated: June 16, 2026 at 10:43 PM UTC
1 product affected across 1 vendorQt· also runs on 7 platforms

Using N/A by N/A?

Get instant alerts when new vulnerabilities affect N/A - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Start FreeSign In
Severity
N/A
Exploit prediction
EPSS 2%

Description

Off-by-one error in the QUtf8Decoder::toUnicode function in Trolltech Qt 3 allows context-dependent attackers to cause a denial of service (crash) via a crafted Unicode string that triggers a heap-based buffer overflow. NOTE: Qt 4 has the same error in the QUtf8Codec::convertToUnicode function, but it is not exploitable.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Qt· Trolltech
95%
3.03.0.33.0.53.13.1.13.1.23.2.13.2.33.3.03.3.13.3.23.3.33.3.43.3.53.3.63.3.73.3.84.14.1.44.1.54.24.2.14.2.3
canonical-ubuntu-linux (environment) · conectiva-linux (environment) · gentoo-linux (environment) · mandrakesoft-mandrake-linux (environment) · mandrakesoft-mandrake-linux-corporate-server (environment) · redhat-enterprise-linux (environment) · redhat-linux (environment)

Runs on — not affected

The affected product only carries this flaw when running on these platforms. The platforms themselves are not vulnerable.

References (36)

Vendor Advisoryx_refsource_SGI
Source: [email protected]
ftp://patches.sgi.com/support/free/security/advisories/20070901-01-P.asc
x_refsource_CONFIRM
Source: [email protected]
http://bugs.gentoo.org/show_bug.cgi?id=192472
x_refsource_MISC
Source: [email protected]
http://dist.trolltech.com/developer/download/175791_3.diff
x_refsource_MISC
Source: [email protected]
http://dist.trolltech.com/developer/download/175791_4.diff
Vendor Advisoryx_refsource_FEDORA
Source: [email protected]
http://fedoranews.org/updates/FEDORA-2007-221.shtml
Vendor Advisoryx_refsource_FEDORA
Source: [email protected]
http://fedoranews.org/updates/FEDORA-2007-703.shtml
VDB Entryx_refsource_OSVDB
Source: [email protected]
http://osvdb.org/39384
Third Party Advisoryx_refsource_SECUNIAVendor Advisory
Source: [email protected]
http://secunia.com/advisories/26778

CVSS

7.5HIGH[email protected]
Confidentiality
PARTIAL
Integrity
PARTIAL
Availability
PARTIAL
Vector?

Quick Info

StatusMODIFIED
CWE
CWE-119

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create accountSign in
Free plan, no card