Gentoo FoundationMGASA-2014-0241Updated qt4 and qtbase5 packages fix security vulnerability
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:N/I:N/A:P
0.015 Low
EPSS
Percentile
86.7%
A NULL pointer dereference flaw was found in QGIFFormat::fillRect in QtGui. If an application using the qt-x11 libraries opened a malicious GIF file with invalid width and height values, it could cause the application to crash (CVE-2014-0190). Qt4 has been patched to correct this flaw and has been updated to version 4.8.6, which fixes several other bugs. Qtbase5 has also been patched to correct this flaw.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Mageia | 4 | noarch | qt4 | < 4.8.6-1 | qt4-4.8.6-1.mga4 |
| Mageia | 4 | noarch | qtbase5 | < 5.2.0-2.3 | qtbase5-5.2.0-2.3.mga4 |
References
Related
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:N/I:N/A:P
0.015 Low
EPSS
Percentile
86.7%