Vulnerability in Qtweb

CVE-2010-5247

Untrusted search path vulnerability in QtWeb Browser 3.3 build 043 allows local users to gain privileges via a Trojan horse wintab32.dll file in the current working directory, as demonstrated by a directory that contains a .html, .htm, or .mhtml file. NOTE: some of these details are obtained from third party information.

EPSS: 0.005 (40.9th percentile) — read the EPSS interpretation.

Affected products

  • Qtweb — versions 3.3
  • N/a — versions n/a

References

  • cve@mitre.org (mailing-list, Exploit, x_refsource_FULLDISC)
  • cve@mitre.org (x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)