Secunia

Some vulnerabilities have been reported in Qt, which can be exploited by malicious people to bypass certain security restrictions, disclose sensitive information, or compromise an application using the library.

1) Multiple errors in WebKit when handling FTP directory listings can be exploited to disclose sensitive information, cause a crash, or potentially execute arbitrary code.

2) An error exists when sending "preflight" requests originating from a page in a different origin. This can be exploited to facilitate cross-site request forgery attacks by injecting custom HTTP headers.

For more information:
SA37346

Solution
Do not browse untrusted sites with an application using Qt components based on WebKit.
Original Advisory
1) http://trac.webkit.org/changeset/48725
2) http://trac.webkit.org/changeset/47494

Other references
Further details available in Customer Area

Deep Links
Links available in Customer Area