Debian Security Advisory 1292-1 – Andreas Nolden discovered a bug in the UTF8 decoding routines in qt4-x11, a C++ GUI library framework, that could allow remote attackers to conduct cross-site scripting (XSS) and directory traversal attacks via long sequences that decode to dangerous metacharacters.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/56809/dsa-1292-1.txt
Source: https://packetstormsecurity.com/files/56809/Debian-Linux-Security-Advisory-1292-1.html