CVE-2009-2700

Published: Sep 2, 2009Modified: Apr 23, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

src/network/ssl/qsslcertificate.cpp in Nokia Trolltech Qt 4.x does not properly handle a '\0' character in a domain name in the Subject Alternative Name field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority, a related issue to CVE-2009-2408.

Affected (42)

Products: Qt: Qt

1 product

Configuration A

42 vulnerable

Vulnerable Software	Affected Versions
Qt Qt	Version 4.0.0
Qt Qt	Version 4.0.1
Qt Qt	Version 4.1.0
Qt Qt	Version 4.1.1
Qt Qt	Version 4.1.2
Qt Qt	Version 4.1.3
Qt Qt	Version 4.1.4
Qt Qt	Version 4.1.5
Qt Qt	Version 4.2.0
Qt Qt	Version 4.2.1
Qt Qt	Version 4.2.3
Qt Qt	Version 4.3.0
Qt Qt	Version 4.3.1
Qt Qt	Version 4.3.2
Qt Qt	Version 4.3.3
Qt Qt	Version 4.3.4
Qt Qt	Version 4.3.5
Qt Qt	Version 4.4.0
Qt Qt	Version 4.4.1
Qt Qt	Version 4.4.2
Qt Qt	Version 4.4.3
Qt Qt	Version 4.5.0
Qt Qt	Version 4.5.1
Qt Qt	Version 4.5.2
Qt Qt	Version 4.5.3
Qt Qt	Version 4.6.0
Qt Qt	Version 4.6.0 rc1
Qt Qt	Version 4.6.1
Qt Qt	Version 4.6.2
Qt Qt	Version 4.6.3
Qt Qt	Version 4.6.4
Qt Qt	Version 4.7.0
Qt Qt	Version 4.7.1
Qt Qt	Version 4.7.2
Qt Qt	Version 4.7.3
Qt Qt	Version 4.7.4
Qt Qt	Version 4.7.5
Qt Qt	Version 4.8.0
Qt Qt	Version 4.8.1
Qt Qt	Version 4.8.2
Qt Qt	Version 4.8.3
Qt Qt	Version 4.8.4