CVE-2015-0295

CVE-2015-0295 affects the BMP decoding path in QtGui (Qt before 5.5). The BMP decoder fails to correctly calculate color masks, enabling a crafted BMP file to trigger a divide-by-zero and crash (remote denial of service). Connected sources (e.g., Qt/QtBase advisories and multiple Nessus entries) ...

CVE-2015-0295: Undefined Security Weakness

The BMP decoder in QtGui in QT before 5.5 does not properly calculate the masks used to extract the color components, which allows remote attackers to cause a denial of service divide-by-zero and crash via a crafted BMP file...

CVE-2015-0295

The BMP decoder in QtGui in QT before 5.5 does not properly calculate the masks used to extract the color components, which allows remote attackers to cause a denial of service divide-by-zero and crash via a crafted BMP file...

UBUNTU-CVE-2015-0295

The BMP decoder in QtGui in QT before 5.5 does not properly calculate the masks used to extract the color components, which allows remote attackers to cause a denial of service divide-by-zero and crash via a crafted BMP file...

Qt 'qbmphandler.cpp' Divide by Zero Denial of Service Vulnerability

Qt is a cross-platform application framework. A denial-of-service vulnerability exists in the graphics processor of Qt versions prior to 5.5, which can be successfully exploited to cause a crash of the affected application...

PT-2015-4563

Name of the Vulnerable Software and Affected Versions Qt versions prior to 5.5 Description The issue concerns a flaw in the BMP decoder within QtGui in Qt, where it fails to correctly calculate masks for extracting color components. This flaw can be exploited by remote attackers using a specially...

libtta 'console/tta.cpp' divide-by-zero denial-of-service vulnerability

libtta is the library in linux that supports ATA host controllers. The Libtta 'console/tta.cpp' function has a divide-by-zero error that allows an attacker to exploit a vulnerability to crash the application...

Libmspack CHM Decompression Divide by Zero Denial of Service Vulnerability

Libmspack is a library of related Microsoft compression formats such as CAB, CHM, HLP, LIT, KWAJ and SZDD. Libmspack's handling of specially crafted CHM files suffers from a divide-by-zero denial-of-service vulnerability, which can be exploited by remote attackers to crash an application...

Unbreakable Enterprise kernel security and bugfix update

2.6.39-400.246.2 - net: sctp: fix NULL pointer dereference in af-fromaddrparam on malformed packet Daniel Borkmann Orabug: 20425333 CVE-2014-7841 2.6.39-400.246.1 - sched: Fix possible divide by zero in avgatom calculation Mateusz Guzik Orabug: 20148169 - include/linux/math64.h: add div64ul Alex...

LibTIFF Divide by Zero Error Denial of Service Vulnerability

LibTiff is an application library responsible for encoding/decoding TIFF image format. The use of the LibTiff library's "tiffdither" tool to process malformed TIFF images suffers from a divide-by-zero error, which can be exploited to build a malicious application and trick the application into...

AZL-7400 CVE-2014-9638 affecting package vorbis-tools for versions less than 1.4.0-35

oggenc in vorbis-tools 1.4.0 allows remote attackers to cause a denial of service divide-by-zero error and crash via a WAV file with the number of channels set to zero...

CVE-2014-9638

oggenc in vorbis-tools 1.4.0 allows remote attackers to cause a denial of service divide-by-zero error and crash via a WAV file with the number of channels set to zero...

Design/Logic Flaw

oggenc in vorbis-tools 1.4.0 allows remote attackers to cause a denial of service divide-by-zero error and crash via a WAV file with the number of channels set to zero...

CVE-2014-9638: Undefined Security Weakness

oggenc in vorbis-tools 1.4.0 allows remote attackers to cause a denial of service divide-by-zero error and crash via a WAV file with the number of channels set to zero...

PT-2015-4316

Name of the Vulnerable Software and Affected Versions vorbis-tools version 1.4.0 Description The issue allows remote attackers to cause a denial of service, resulting in a divide-by-zero error and crash, via a WAV file with the number of channels set to zero. Recommendations For vorbis-tools...

[ MDVSA-2015:024 ] libsndfile

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2015:024 http://www.mandriva.com/en/support/security/ Package : libsndfile Date : January 15, 2015 Affected: Business Server 1.0 Problem Description: Updated libsndfile packages fix security vulnerabilities:...

Mandriva Linux Security Advisory : libsndfile (MDVSA-2015:024)

Updated libsndfile packages fix security vulnerabilities : libsndfile contains multiple buffer-overflow vulnerabilities in src/sd2.c because it fails to properly bounds-check user-supplied input, which may allow an attacker to execute arbitrary code or cause a denial of service CVE-2014-9496...

Updated libsndfile packages fix CVE-2014-9496

Updated libsndfile packages fix security vulnerabilities: libsndfile contains multiple buffer-overflow vulnerabilities in src/sd2.c because it fails to properly bounds-check user supplied input, which may allow an attacker to execute arbitrary code or cause a denial of service CVE-2014-9496...

MGASA-2015-0015 Updated libsndfile packages fix CVE-2014-9496

Updated libsndfile packages fix security vulnerabilities: libsndfile contains multiple buffer-overflow vulnerabilities in src/sd2.c because it fails to properly bounds-check user supplied input, which may allow an attacker to execute arbitrary code or cause a denial of service CVE-2014-9496...

PT-2014-8421

Name of the Vulnerable Software and Affected Versions LibTIFF version 4.0.3 Description The issue allows remote attackers to cause a denial of service, resulting in a divide-by-zero error and application crash, via a crafted TIFF image. This is due to the TIFFmalloc function not rejecting a zero...