openSUSE Security Update : gimp (openSUSE-SU-2012:1131-1)

Fixed 2 gimp security bugs : - fixed bnc724628 CVE-2012-3481: gimp: GIF plugin 'height' / 'len' integer overflow leading to heap-based buffer overflow - fixed bnc763595 CVE-2012-2763: gimp: buffer overflow in script-fu's server component %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

Fedora 19 : qt3-3.3.8b-58.fc19 (2014-6896)

This update fixes a DoS in the Qt 3 GIF image handler CVE-2014-0190, QTBUG-38367, through a patch backported from Qt 4. It also fixes the path settings in qt.sh for ppc64le, and in qt.csh for both ppc64 and ppc64le. Note that Tenable Network Security has extracted the preceding description block...

Updated qt4 and qtbase5 packages fix security vulnerability

A NULL pointer dereference flaw was found in QGIFFormat::fillRect in QtGui. If an application using the qt-x11 libraries opened a malicious GIF file with invalid width and height values, it could cause the application to crash CVE-2014-0190. Qt4 has been patched to correct this flaw and has been...

Updated qt4 packages fix security vulnerability

A NULL pointer dereference flaw was found in QGIFFormat::fillRect in QtGui. If an application using the qt-x11 libraries opened a malicious GIF file with invalid width and height values, it could cause the application to crash CVE-2014-0190. Qt4 has been patched to correct this flaw and has been...

MGASA-2014-0240 Updated qt4 packages fix security vulnerability

A NULL pointer dereference flaw was found in QGIFFormat::fillRect in QtGui. If an application using the qt-x11 libraries opened a malicious GIF file with invalid width and height values, it could cause the application to crash CVE-2014-0190. Qt4 has been patched to correct this flaw and has been...

Fedora 19 : qt-4.8.6-5.fc19 (2014-6083)

New upstream stable bugfix release, as well as a fix for : DoS vulnerability in the GIF image handler QTBUG-38367. See also http://blog.qt.digia.com/blog/2014/04/24/qt-4-8-6-released/ Note that Tenable Network Security has extracted the preceding description block directly from the Fedora securit...

Fedora 19 : mingw-qt5-qtbase-5.2.1-3.fc19 (2014-5999)

Fix invalid reference to qtmain when using CMake RHBZ 1092465 - Fix DoS vulnerability in the GIF image handler QTBUG-38367, RHBZ 1092837 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to...

Fedora 20 : mingw-qt5-qtbase-5.2.1-3.fc20 (2014-5988)

Fix invalid reference to qtmain when using CMake RHBZ 1092465 Fix DoS vulnerability in the GIF image handler QTBUG-38367, RHBZ 1092837 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automaticall...

Fedora 20 : mingw-qt-4.8.6-1.fc20 (2014-6003)

Update to 4.8.6 - Fix DoS vulnerability in the GIF image handler QTBUG-38367 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without...

CVE-2014-0190

The GIF decoder in QtGui in Qt before 5.3 allows remote attackers to cause a denial of service NULL pointer dereference via invalid width and height values in a GIF image...

Null pointer dereference

The GIF decoder in QtGui in Qt before 5.3 allows remote attackers to cause a denial of service NULL pointer dereference via invalid width and height values in a GIF image...

CVE-2014-0190

The CVE-2014-0190 issue affects Qt's GIF handling in QtGui prior to Qt 5.3, where a GIF image with invalid width/height can trigger a NULL pointer dereference leading to a denial of service. Affected component: QtGui GIF decoder (Qt 4.x/Qt5 up to 5.2.x). Root cause: improper validation of GIF dim...

CVE-2014-0190

Removed by vendor...

CVE-2014-0190

The GIF decoder in QtGui in Qt before 5.3 allows remote attackers to cause a denial of service NULL pointer dereference via invalid width and height values in a GIF image...

UBUNTU-CVE-2014-0190

The GIF decoder in QtGui in Qt before 5.3 allows remote attackers to cause a denial of service NULL pointer dereference via invalid width and height values in a GIF image...

CVE-2014-0190

The GIF decoder in QtGui in Qt before 5.3 allows remote attackers to cause a denial of service NULL pointer dereference via invalid width and height values in a GIF image...

USN-2205-1: LibTIFF vulnerabilities

Pedro Ribeiro discovered that LibTIFF incorrectly handled certain malformed images when using the gif2tiff tool. If a user or automated system were tricked into opening a specially crafted GIF image, a remote attacker could crash the application, leading to a denial of service, or possibly execut...

Fedora 19 : qt5-qtbase-5.2.1-8.fc19 (2014-5680)

DoS vulnerability in the GIF image handler QTBUG-38367 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

qt4-imageformats, qt5-gui -- DoS vulnerability in the GIF image handler

Richard J. Moore reports: The builtin GIF decoder in QtGui prior to Qt 5.3 contained a bug that would lead to a null pointer dereference when loading certain hand crafted corrupt GIF files. This in turn would cause the application loading these hand crafted GIFs to crash...

[SECURITY] Fedora 20 Update: ImageMagick-6.8.6.3-4.fc20

ImageMagick is an image display and manipulation tool for the X Window System. ImageMagick can read and write JPEG, TIFF, PNM, GIF, and Photo CD image formats. It can resize, rotate, sharpen, color reduce, or add special effects to an image, and when finished you can either save the completed wor...