OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
[SA24727] Qt Overlong UTF-8 Sequence Cross-Site Scripting Vulnerability

From: Secunia Security Advisories (sec-advsecunia.com)
Date: Wed Apr 04 2007 - 18:02:05 CDT

----------------------------------------------------------------------

Secunia customers receive relevant and filtered advisories.
Delivery is done via different channels including SMS, Email, Web,
and https based XML feed.
http://corporate.secunia.com/trial/38/request/

----------------------------------------------------------------------

TITLE:
Qt Overlong UTF-8 Sequence Cross-Site Scripting Vulnerability

SECUNIA ADVISORY ID:
SA24727

VERIFY ADVISORY:
http://secunia.com/advisories/24727/

CRITICAL:
Less critical

IMPACT:
Cross Site Scripting

WHERE:
From remote

SOFTWARE:
Qt 4.x
http://secunia.com/product/12368/
Qt 3.x
http://secunia.com/product/383/

DESCRIPTION:
Andreas Nolden has reported a vulnerability in Qt, which potentially
can be exploited to conduct cross-site scripting attacks in
applications using the Qt libraries.

The vulnerability is caused due to Qt not properly rejecting overly
long UTF-8 character sequences. This can be exploited to bypass
certain character sanitation mechanisms and allow e.g. the execution
of HTML and script code in applications depending on the correct
behavior.

The vulnerability is reported in Qt 3.x and 4.x.

SOLUTION:
Apply patches.

Qt 3.3.8:
http://www.trolltech.com/developer/download/Qt-3.3.8-UTF-8-fix.diff

Qt 4.2.3:
http://www.trolltech.com/developer/download/Qt-4.2.3-UTF-8-fix.diff

PROVIDED AND/OR DISCOVERED BY:
Andreas Nolden

ORIGINAL ADVISORY:
http://www.trolltech.com/company/newsroom/announcements/press.2007-03-30.9172215350

----------------------------------------------------------------------

About:
This Advisory was delivered by Secunia as a free service to help
everybody keeping their systems up to date against the latest
vulnerabilities.

Subscribe:
http://secunia.com/secunia_security_advisories/

Definitions: (Criticality, Where etc.)
http://secunia.com/about_secunia_advisories/

Please Note:
Secunia recommends that you verify all advisories you receive by
clicking the link.
Secunia NEVER sends attached files with advisories.
Secunia does not advise people to install third party patches, only
use those supplied by the vendor.

----------------------------------------------------------------------

Unsubscribe: Secunia Security Advisories

----------------------------------------------------------------------