Qt 'QTextEngine::LayoutData::reallocate()' Memory Corruption Vulnerability

Bugtraq ID:	41873
Class:	Unknown
CVE:
Remote:	Yes
Local:	No
Published:	Jul 13 2010 12:00AM
Updated:	Jul 23 2010 10:26PM
Credit:	D4rk357
Vulnerable:	Trolltech Qt 4.6.3 Trolltech Qt 4.6.2 Trolltech Qt 4.6.1 Trolltech Qt 4.6 Trolltech Qt 4.5.2 Trolltech Qt 4.5.1 Trolltech Qt 4.4.3 Trolltech Qt 4.3.3 Trolltech Qt 4.3.2 Trolltech Qt 4.3.1 Trolltech Qt 4.3 Trolltech Qt 4.2.3 Trolltech Qt 4.2.1 Trolltech Qt 4.1.5 Trolltech Qt 4.1.4 Trolltech Qt 4.1 Trolltech Qt 4.0.1 Trolltech Qt 4.5 Trolltech Qt 4.2 Trolltech Qt 4.1 Arora Arora 0.10.0-1
Not Vulnerable:

Qt 'QTextEngine::LayoutData::reallocate()' Memory Corruption Vulnerability

Qt is prone to a remote memory-corruption vulnerability.

Successful exploits may allow the attacker to execute arbitrary code in the context of the application. Failed exploit attempts will result in a denial-of-service condition.

Qt 'QTextEngine::LayoutData::reallocate()' Memory Corruption Vulnerability

The following proof of concept is available.

• /data/vulnerabilities/exploits/41873.html

Qt 'QTextEngine::LayoutData::reallocate()' Memory Corruption Vulnerability

Solution:
Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Qt 'QTextEngine::LayoutData::reallocate()' Memory Corruption Vulnerability

References:

• arora - Project Hosting on Google Code (arora)