CVE-2005-0627

published 2005-05-02

CVE-2005-0627: Qt before 3.3.4 searches the BUILD_PREFIX directory, which could be world-writable, to load shared libraries regardless of the LD_LIBRARY_PATH environment…

Priority P4 15 medium 4.6 CVSS 2.0

AV L AC L Au N C P I P A P

Qt before 3.3.4 searches the BUILD_PREFIX directory, which could be world-writable, to load shared libraries regardless of the LD_LIBRARY_PATH environment variable, which allows local users to execute arbitrary programs.

Affected

12 ranges

Vendor	Product	Version range	Fixed in
trolltech	qt	—	—
trolltech	qt	—	—
trolltech	qt	—	—
trolltech	qt	—	—
trolltech	qt	—	—
trolltech	qt	—	—
trolltech	qt	—	—
trolltech	qt	—	—
trolltech	qt	—	—
trolltech	qt	—	—
trolltech	qt	—	—
trolltech	qt	—	—

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.