CVE-2007-5965: Trolltech Qsslsocket

Medium severity, CVSS 4.3. EPSS: 1.3% chance of exploitation in the next 30 days.

QSslSocket in Trolltech Qt 4.3.0 through 4.3.2 does not properly verify SSL certificates, which might make it easier for remote attackers to trick a user into accepting an invalid server certificate for a spoofed service, or trick a service into accepting an invalid client certificate for a user.

Affected products

• Trolltech Qsslsocket: version 4.3.0 only; version 4.3.1 only; version 4.3.2 only

Published 2008-01-08. Last modified 2026-06-16.