Launchpad.net

CVE 2005-0627

Qt before 3.3.4 searches the BUILD_PREFIX directory, which could be world-writable, to load shared libraries regardless of the LD_LIBRARY_PATH environment variable, which allows local users to execute arbitrary programs.

See the CVE page on Mitre.org for more details.

References