CVE-2009-4975

Severity: medium (CVSS 4.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.1% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2010-08-02 · updated 2026-06-16
Weakness: CWE-79

Description

Cross-site scripting (XSS) vulnerability in webview.cpp in QtDemoBrowser allows remote attackers to inject arbitrary web script or HTML via a URL associated with a nonexistent domain name, related to a "universal XSS" issue, a similar vulnerability to CVE-2010-2536.

Affected products

Nokia Qtdemobrowser: all versions

References

http://bugreports.qt.nokia.com/browse/QTWEBKIT-22
https://bugs.kde.org/show_bug.cgi?id=217464
https://bugs.webkit.org/show_bug.cgi?id=32252
https://exchange.xforce.ibmcloud.com/vulnerabilities/60879
http://bugreports.qt.nokia.com/browse/QTWEBKIT-22
https://bugs.kde.org/show_bug.cgi?id=217464
https://bugs.webkit.org/show_bug.cgi?id=32252
https://exchange.xforce.ibmcloud.com/vulnerabilities/60879

Get alerted when CVE-2009-4975 or the next vulnerability affects your stack