2981 matches found
Qt has multiple buffer overflow vulnerabilities (CNVD-2015-03162)
Qt is a cross-platform application framework. Multiple buffer overflow vulnerabilities exist in Qt versions prior to 4.8.7, and 5.x versions prior to 5.4.2, allowing remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted BMP image...
CVE-2015-1858
Multiple buffer overflows in gui/image/qbmphandler.cpp in the QtBase module in Qt before 4.8.7 and 5.x before 5.4.2 allow remote attackers to cause a denial of service segmentation fault and crash and possibly execute arbitrary code via a crafted BMP image...
DEBIAN-CVE-2015-1858
Multiple buffer overflows in gui/image/qbmphandler.cpp in the QtBase module in Qt before 4.8.7 and 5.x before 5.4.2 allow remote attackers to cause a denial of service segmentation fault and crash and possibly execute arbitrary code via a crafted BMP image...
CVE-2015-1858
Multiple buffer overflows in gui/image/qbmphandler.cpp in the QtBase module in Qt before 4.8.7 and 5.x before 5.4.2 allow remote attackers to cause a denial of service segmentation fault and crash and possibly execute arbitrary code via a crafted BMP image...
Buffer overflow
Multiple buffer overflows in gui/image/qbmphandler.cpp in the QtBase module in Qt before 4.8.7 and 5.x before 5.4.2 allow remote attackers to cause a denial of service segmentation fault and crash and possibly execute arbitrary code via a crafted BMP image...
CVE-2015-1858
Multiple buffer overflows in gui/image/qbmphandler.cpp in the QtBase module in Qt before 4.8.7 and 5.x before 5.4.2 allow remote attackers to cause a denial of service segmentation fault and crash and possibly execute arbitrary code via a crafted BMP image...
CVE-2015-1858
Multiple buffer overflows in gui/image/qbmphandler.cpp in the QtBase module in Qt before 4.8.7 and 5.x before 5.4.2 allow remote attackers to cause a denial of service segmentation fault and crash and possibly execute arbitrary code via a crafted BMP image...
CVE-2015-1858
CVE-2015-1858 affects QtBase’s BMP handling: multiple buffer overflow vulnerabilities in gui/image/qbmphandler.cpp allow remote denial of service and possible code execution via crafted BMP images. In affected products, the issue exists in Qt 4.8.x up to before 4.8.7 and in Qt 5.x up to before 5....
PT-2015-1205
Name of the Vulnerable Software and Affected Versions IBM Domino versions 8.5 before 8.5.3 FP6 IF7 IBM Domino versions 9.0 before 9.0.1 FP3 IF3 Description The issue is caused by a stack-based buffer overflow error. It can be exploited by a remote attacker using a specially crafted BMP image to...
CVE-2015-1858
Multiple buffer overflows in gui/image/qbmphandler.cpp in the QtBase module in Qt before 4.8.7 and 5.x before 5.4.2 allow remote attackers to cause a denial of service segmentation fault and crash and possibly execute arbitrary code via a crafted BMP image...
PT-2015-1206
Name of the Vulnerable Software and Affected Versions IBM Domino versions 8.5 through 8.5.3 FP6 IF6 and versions 9.0 through 9.0.1 FP3 IF2 Description The issue is caused by a stack-based buffer overflow error. This allows remote attackers to execute arbitrary code via a crafted BMP image...
Updated qt3 qt4 & qtbase5 packages fix security vulnerabilities
Updated qt3, qt4, and qtbase5 packages fix security vulnerabilities: It is possible to construct invalid BMP CVE-2015-1858, ICO CVE-2015-1859 and GIF CVE-2015-1860 images that lead to buffer overflows. Qt3 is only vulnerable to the CVE-2015-1860 issue with GIF images...
Fedora 21 : qt5-qtbase-5.4.1-9.fc21 (2015-6364)
Multiple vulnerabilities were found in Qt image format handling of BMP, ICO and GIF files. The issues exposed included denial of service and buffer overflows leading to heap corruption. It is possible the latter could be used to perform remote code execution. See also...
[slackware-security] qt
New qt packages are available for Slackware 14.1, and -current to fix security issues. Here are the details from the Slackware 14.1 ChangeLog: patches/packages/qt-4.8.6-i486-1slack14.1.txz: Upgraded. Fixed issues with BMP, ICO, and GIF handling that could lead to a denial of service or the...
Updated potrace packages fix CVE-2013-7437
Updated potrace packages fix security vulnerability: Multiple integer overflows in potrace 1.11 allow remote attackers to cause a denial of service crash via large dimensions in a BMP image, which triggers a buffer overflow CVE-2013-7437...
qt4-imageformats, qt4-gui, qt5-gui -- Multiple Vulnerabilities in Qt Image Format Handling
Richard J. Moore reports: Due to two recent vulnerabilities identified in the built-in image format handling code, it was decided that this area required further testing to determine if further issues remained. Fuzzing using afl-fuzz located a number of issues in the handling of BMP, ICO and GIF...
USN-2553-2: LibTIFF regression
USN-2553-1 fixed vulnerabilities in LibTIFF. One of the security fixes caused a regression when saving certain TIFF files with a Predictor tag. The problematic patch has been temporarily backed out until a more complete fix is available. We apologize for the inconvenience. Original advisory...
USN-2553-2 tiff regression
USN-2553-1 fixed vulnerabilities in LibTIFF. One of the security fixes caused a regression when saving certain TIFF files with a Predictor tag. The problematic patch has been temporarily backed out until a more complete fix is available. We apologize for the inconvenience. Original advisory...
Integer overflow
Multiple integer overflows in potrace 1.11 allow remote attackers to cause a denial of service crash via large dimensions in a BMP image, which triggers a buffer overflow...