Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
QSslSocket in Qt before 4.7.0-rc1 recognizes a wildcard IP address in the subject's Common Name field of an X.509 certificate, which might allow man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Qt 安全绕过漏洞
Vulnerability Description
Digia Qt是芬兰Digia公司的一套跨平台的C++应用程序开发框架。该框架可用于开发GUI程序。 Qt中存在安全绕过漏洞，该漏洞源于应用程序未正确验证包含‘CN’的SSL证书，该证书可作为通配符与IP地址一起使用。攻击者可利用该漏洞将信用的替换为恶意的SSL证书，执行中间人攻击或冒充信任的服务器，有助于进一步攻击。Qt 4.6版本和早期的版本中存在漏洞。
CVSS Information
N/A
Vulnerability Type
N/A