Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The UTF-8 decoder in codecs/qutfcodec.cpp in Qt 3.3.8 and 4.2.3 does not reject long UTF-8 sequences as required by the standard, which allows remote attackers to conduct cross-site scripting (XSS) and directory traversal attacks via long sequences that decode to dangerous metacharacters.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Trolltech Qt UTF-8编译器字符输入验证漏洞
Vulnerability Description
Qt 的codecs/qutfcodec.cpp中的UTF-8译码器没有注入过长的UTF-8序列存在跨站脚本攻击和目录遍历漏洞。远程攻击者可以借助长序列,执行跨站脚本攻击和目录遍历攻击。这些长参数会对危险元字符进行解码。
CVSS Information
N/A
Vulnerability Type
N/A