CVE-2010-5076 PUBLISHED CVSS 4.300000190734863 MEDIUM

QSslSocket in Qt before 4.7.0-rc1 recognizes a wildcard IP address in the subject's Common Name field of an X.509 certificate, which might allow man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority.

EPSS 0.49% · 65.6th percentile

Risk Scores

CVSS v2.0
4.300000190734863
EPSS Score
0.49%
65.6th percentile

Affected Products

VendorProductVersions
n/an/an/a
qtqt4.0.0, 4.0.1, 4.1.0
digiaqt0

Timeline

References

Open in Interactive Console →