USN-2626-1: Qt vulnerabilities

Wolfgang Schenk discovered that Qt incorrectly handled certain malformed GIF images. If a user or automated system were tricked into opening a specially crafted GIF image, a remote attacker could use this issue to cause Qt to crash, resulting in a denial of service. This issue only applied to...

USN-2626-1 qt4-x11, qtbase-opensource-src vulnerabilities

Wolfgang Schenk discovered that Qt incorrectly handled certain malformed GIF images. If a user or automated system were tricked into opening a specially crafted GIF image, a remote attacker could use this issue to cause Qt to crash, resulting in a denial of service. This issue only applied to...

SUSE-SU-2015:1359-1 Security update for libqt4

The libqt4 library was updated to fix several security and non security issues. The following vulnerabilities were fixed: - bsc921999: CVE-2015-0295: division by zero when processing malformed BMP files - bsc927806: CVE-2015-1858: segmentation fault in BMP Qt Image Format Handling - bsc927807:...

Qt has multiple buffer overflow vulnerabilities (CNVD-2015-03161)

Qt is a cross-platform application framework. Multiple buffer overflow vulnerabilities exist in Qt versions prior to 4.8.7, and 5.x versions prior to 5.4.2, allowing remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted ICO image...

Qt has multiple buffer overflow vulnerabilities (CNVD-2015-03162)

Qt is a cross-platform application framework. Multiple buffer overflow vulnerabilities exist in Qt versions prior to 4.8.7, and 5.x versions prior to 5.4.2, allowing remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted BMP image...

Bacula - Network Backup Tool for Linux, Unix, Mac, and Windows

Bacula is a set of computer programs that permits the system administrator to manage backup, recovery, and verification of computer data across a network of computers of different kinds. Bacula can also run entirely upon a single computer and can backup to various types of media, including tape a...

DEBIAN-CVE-2015-1858

Multiple buffer overflows in gui/image/qbmphandler.cpp in the QtBase module in Qt before 4.8.7 and 5.x before 5.4.2 allow remote attackers to cause a denial of service segmentation fault and crash and possibly execute arbitrary code via a crafted BMP image...

CVE-2015-1858

Multiple buffer overflows in gui/image/qbmphandler.cpp in the QtBase module in Qt before 4.8.7 and 5.x before 5.4.2 allow remote attackers to cause a denial of service segmentation fault and crash and possibly execute arbitrary code via a crafted BMP image...

CVE-2015-1859

Multiple buffer overflows in plugins/imageformats/ico/qicohandler.cpp in the QtBase module in Qt before 4.8.7 and 5.x before 5.4.2 allow remote attackers to cause a denial of service segmentation fault and crash and possibly execute arbitrary code via a crafted ICO image...

CVE-2015-1859

CVE-2015-1859 affects the QtBase module. It is due to multiple buffer overflows in the ICO image format handler (plugins/imageformats/ico/qicohandler.cpp). The vulnerability exists in Qt 4.x up to but not including 4.8.7, and in Qt 5.x up to but not including 5.4.2, allowing remote attackers to c...

CVE-2015-1860: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple buffer overflows in gui/image/qgifhandler.cpp in the QtBase module in Qt before 4.8.7 and 5.x before 5.4.2 allow remote attackers to cause a denial of service segmentation fault and possibly execute arbitrary code via a crafted GIF image...

CVE-2015-1859: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple buffer overflows in plugins/imageformats/ico/qicohandler.cpp in the QtBase module in Qt before 4.8.7 and 5.x before 5.4.2 allow remote attackers to cause a denial of service segmentation fault and crash and possibly execute arbitrary code via a crafted ICO image...

CVE-2015-1858: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple buffer overflows in gui/image/qbmphandler.cpp in the QtBase module in Qt before 4.8.7 and 5.x before 5.4.2 allow remote attackers to cause a denial of service segmentation fault and crash and possibly execute arbitrary code via a crafted BMP image...

UBUNTU-CVE-2015-1858

Multiple buffer overflows in gui/image/qbmphandler.cpp in the QtBase module in Qt before 4.8.7 and 5.x before 5.4.2 allow remote attackers to cause a denial of service segmentation fault and crash and possibly execute arbitrary code via a crafted BMP image...

UBUNTU-CVE-2015-1859

Multiple buffer overflows in plugins/imageformats/ico/qicohandler.cpp in the QtBase module in Qt before 4.8.7 and 5.x before 5.4.2 allow remote attackers to cause a denial of service segmentation fault and crash and possibly execute arbitrary code via a crafted ICO image...

Digia Qt GIF File Denial of Service Vulnerability

Digia Qt is a cross-platform C++ application development framework. An error in the Digia Qt 'QGIFFormat::nextY' function gui/image/qgifhandler.cpp when processing GIF images allows remote attackers to conduct a denial of service and take control of applications that use the library...

Ubuntu: Security Advisory (USN-2582-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-2582-1: Oxide vulnerabilities

A use-after-free was discovered in the DOM implementation in Blink. If a user were tricked in to opening a specially crafted website, an attacker could potentially exploit this to cause a denial of service via renderer crash, or execute arbitrary code with the privileges of the sandboxed render...

qt multiple security vulnerabilities

Memory corruptions on different graphics formats parsing...

[slackware-security] qt (SSA:2015-111-13)

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 slackware-security qt SSA:2015-111-13 New qt packages are available for Slackware 14.1, and -current to fix security issues. Here are the details from the Slackware 14.1 ChangeLog: +--------------------------+...