| Package | Affected versions | Patched versions |
|---|---|---|
| qt | ≤ 4.6.2 | |
| webkit | ≤ r56379 |
Off-by-one error in the WebSocketHandshake::readServerHandshake function in websockets/WebSocketHandshake.cpp in WebCore in WebKit before r56380, as used in Qt and other products, allows remote websockets servers to cause a denial of service (memory corruption) or possibly have unspecified other impact via an upgrade header that is long and invalid.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free