Lucene search

K
freebsdFreeBSD5713BFDA-E27D-11E4-B2CE-5453ED2E2B49
HistoryApr 12, 2015 - 12:00 a.m.

qt4-imageformats, qt4-gui, qt5-gui -- Multiple Vulnerabilities in Qt Image Format Handling

2015-04-1200:00:00
vuxml.freebsd.org
15

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.042 Low

EPSS

Percentile

92.1%

Richard J. Moore reports:

Due to two recent vulnerabilities identified in the built-in image
format handling code, it was decided that this area required further
testing to determine if further issues remained. Fuzzing using
afl-fuzz located a number of issues in the handling of BMP, ICO and
GIF files. The issues exposed included denial of service and buffer
overflows leading to heap corruption. It is possible the latter could
be used to perform remote code execution.

OSVersionArchitecturePackageVersionFilename
FreeBSDanynoarchqt4-imageformats< 4.8.6_3UNKNOWN
FreeBSDanynoarchqt4-gui< 4.8.6_5UNKNOWN
FreeBSDanynoarchqt5-gui< 5.4.1_1UNKNOWN

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.042 Low

EPSS

Percentile

92.1%