CVE-2007-3388: SQL Injection
Multiple format string vulnerabilities in (1) qtextedit.cpp, (2) qdatatable.cpp, (3) qsqldatabase.cpp, (4) qsqlindex.cpp, (5) qsqlrecord.cpp, (6) qglobal.cpp, and (7) qsvgdevice.cpp in QTextEdit in Trolltech Qt 3 before 3.3.8 20070727 allow remote attackers to execute arbitrary code via format string specifiers in text used to compose an error message.
Affected Software
Remediation
Patch Available
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2007-3388?
CVE-2007-3388 has a high severity rating due to the potential for remote code execution.
How do I fix CVE-2007-3388?
To fix CVE-2007-3388, update Trolltech Qt to version 3.3.8 or later.
What versions of Trolltech Qt are affected by CVE-2007-3388?
CVE-2007-3388 affects Trolltech Qt versions prior to 3.3.8.
Can CVE-2007-3388 be exploited remotely?
Yes, CVE-2007-3388 can be exploited remotely by attackers through specially crafted input.
What are the consequences of exploiting CVE-2007-3388?
Exploiting CVE-2007-3388 can allow an attacker to execute arbitrary code on the vulnerable system.