PT-2015-4563

Name of the Vulnerable Software and Affected Versions Qt versions prior to 5.5 Description The issue concerns a flaw in the BMP decoder within QtGui in Qt, where it fails to correctly calculate masks for extracting color components. This flaw can be exploited by remote attackers using a specially...

Fedora 20 : qt3-3.3.8b-62.fc20 (2015-2901)

This update fixes CVE-2015-0295, a division by zero when loading some specific invalid BMP/DIB image files, which could be exploited for denial of service application crash attacks. The security patch is backported from Qt 4. Note that Tenable Network Security has extracted the preceding...

FreeBSD : qt4-gui, qt5-gui -- DoS vulnerability in the BMP image handler (c9c3374d-c2c1-11e4-b236-5453ed2e2b49)

Richard J. Moore reports : The builtin BMP decoder in QtGui prior to Qt 5.5 contained a bug that would lead to a division by zero when loading certain corrupt BMP files. This in turn would cause the application loading these hand crafted BMPs to crash. %NASLMINLEVEL 70300 C Tenable Network...

Fedora 21 : qt-4.8.6-25.fc21 (2015-2895)

DoS vulnerability in the BMP image handler CVE-2015-0295 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issue...

qt4-gui, qt5-gui -- DoS vulnerability in the BMP image handler

Richard J. Moore reports: The builtin BMP decoder in QtGui prior to Qt 5.5 contained a bug that would lead to a division by zero when loading certain corrupt BMP files. This in turn would cause the application loading these hand crafted BMPs to crash...

CVE-2014-9330

Integer overflow in tifpackbits.c in bmp2tif in libtiff 4.0.3 allows remote attackers to cause a denial of service crash via crafted BMP image, related to dimensions, which triggers an out-of-bounds read...

Integer overflow

Integer overflow in tifpackbits.c in bmp2tif in libtiff 4.0.3 allows remote attackers to cause a denial of service crash via crafted BMP image, related to dimensions, which triggers an out-of-bounds read...

CVE-2014-9330

CVE-2014-9330 is a LibTIFF vulnerability: an integer overflow in tif_packbits.c (bmp2tif) in libtiff 4.0.3 can be exploited by remote attackers via crafted BMP images to crash the process or trigger an out-of-bounds read. Multiple connected advisories reference this CVE, listing it among libtiff ...

CVE-2014-9330

Integer overflow in tifpackbits.c in bmp2tif in libtiff 4.0.3 allows remote attackers to cause a denial of service crash via crafted BMP image, related to dimensions, which triggers an out-of-bounds read...

CVE-2014-8637

Mozilla Firefox before 35.0 and SeaMonkey before 2.32 do not properly initialize memory for BMP images, which allows remote attackers to obtain sensitive information from process memory via a crafted web page that triggers the rendering of malformed BMP data within a CANVAS element...

Information disclosure

Mozilla Firefox before 35.0 and SeaMonkey before 2.32 do not properly initialize memory for BMP images, which allows remote attackers to obtain sensitive information from process memory via a crafted web page that triggers the rendering of malformed BMP data within a CANVAS element...

CVE-2014-8637

CVE-2014-8637 affects Mozilla Firefox <35.0 and SeaMonkey

CVE-2014-8637: Exposure of Sensitive Information to an Unauthorized Actor

Mozilla Firefox before 35.0 and SeaMonkey before 2.32 do not properly initialize memory for BMP images, which allows remote attackers to obtain sensitive information from process memory via a crafted web page that triggers the rendering of malformed BMP data within a CANVAS element...

CVE-2014-8637

Mozilla Firefox before 35.0 and SeaMonkey before 2.32 do not properly initialize memory for BMP images, which allows remote attackers to obtain sensitive information from process memory via a crafted web page that triggers the rendering of malformed BMP data within a CANVAS element...

PT-2015-4068

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 35.0 SeaMonkey versions prior to 2.32 Description The issue allows remote attackers to obtain sensitive information from process memory via a crafted web page that triggers the rendering of malformed BMP data...

[CORE-2014-0006] - Delphi and C++ Builder VCL library Heap Buffer Overflow

Core Security - Corelabs Advisory http://corelabs.coresecurity.com/ Delphi and C++ Builder VCL library Heap Buffer Overflow 1. Advisory Information Title: Delphi and C++ Builder VCL library Heap Buffer Overflow Advisory ID: CORE-2014-0006 Advisory URL:...

Embarcadero Delphi / C++ Builder VCL library buffer overflow

Buffer overflow on BMP parsing...

Heap overflow

Heap-based buffer overflow in the ReadDIB function in the Vcl.Graphics.TPicture.Bitmap implementation in the Visual Component Library VCL in Embarcadero Delphi XE6 20.0.15596.9843 and C++ Builder XE6 20.0.15596.9843 allows context-dependent attackers to execute arbitrary code via the...

CVE-2014-0994

CVE-2014-0994 affects Embarcadero Delphi XE6 and C++ Builder XE6 (VCL Graphics, ReadDIB in TPicture.Bitmap). A heap-based buffer overflow occurs when processing malformed BMP files, specifically via BITMAPINFOHEADER.biClrUsed, after an incomplete fix for CVE-2014-0993. The result is potential arb...

CVE-2014-0994

Heap-based buffer overflow in the ReadDIB function in the Vcl.Graphics.TPicture.Bitmap implementation in the Visual Component Library VCL in Embarcadero Delphi XE6 20.0.15596.9843 and C++ Builder XE6 20.0.15596.9843 allows context-dependent attackers to execute arbitrary code via the...