CVE-2015-0295

CVE-2015-0295 affects the BMP decoding path in QtGui (Qt before 5.5). The BMP decoder fails to correctly calculate color masks, enabling a crafted BMP file to trigger a divide-by-zero and crash (remote denial of service). Connected sources (e.g., Qt/QtBase advisories and multiple Nessus entries) ...

CVE-2015-0295

The BMP decoder in QtGui in QT before 5.5 does not properly calculate the masks used to extract the color components, which allows remote attackers to cause a denial of service divide-by-zero and crash via a crafted BMP file...

MGASA-2015-0105 Updated qt3, qt4 and qtbase5 packages fix security vulnerability

The builtin BMP decoder in QtGui prior to Qt 5.5 contained a bug that would lead to a divsion by zero when loading certain corrupt BMP files CVE-2015-0295. This in turn would cause the application loading these hand crafted BMPs to crash. Qt3, Qt4 and qtbase5 have been patched to prevent this...

qt4-gui, qt5-gui -- DoS vulnerability in the BMP image handler

Richard J. Moore reports: The builtin BMP decoder in QtGui prior to Qt 5.5 contained a bug that would lead to a division by zero when loading certain corrupt BMP files. This in turn would cause the application loading these hand crafted BMPs to crash...

GLSA-201412-25 : QtGui: Denial of Service

The remote host is affected by the vulnerability described in GLSA-201412-25 QtGui: Denial of Service A NULL pointer dereference has been found in QtGui. Impact : A remote attacker could send a specially crafted GIF image, possibly resulting in a Denial of Service condition. Workaround : There is...

QtGui: Denial of service

Background QtGui is the GUI module and platform plugins for the Qt5 framework. Description A NULL pointer dereference has been found in QtGui. Impact A remote attacker could send a specially crafted GIF image, possibly resulting in a Denial of Service condition. Workaround There is no known...

SuSE 11.3 Security Update : novell-qtgui, novell-ui-base (SAT Patch Number 9276)

Packages novell-ui-base and novell-qtgui were updated to prevent erroneous rights assignment when a user is granted 'File Scan' rights F. In this case nwrights was assigning Supervisor S rights. CVE-2014-0595 Further information is available at https://bugzilla.novell.com/showbug.cgi?id=872796...

Updated qt3 packages fix security vulnerabilities

Updated qt3 packages fix security vulnerabilities: QXmlSimpleReader in Qt versions prior to 5.2 supports expansion of internal entities in XML documents without placing restrictions to ensure the document does not cause excessive memory usage. If an application using this API processes untrusted...

Updated qt4 and qtbase5 packages fix security vulnerability

A NULL pointer dereference flaw was found in QGIFFormat::fillRect in QtGui. If an application using the qt-x11 libraries opened a malicious GIF file with invalid width and height values, it could cause the application to crash CVE-2014-0190. Qt4 has been patched to correct this flaw and has been...

Updated qt4 packages fix security vulnerability

A NULL pointer dereference flaw was found in QGIFFormat::fillRect in QtGui. If an application using the qt-x11 libraries opened a malicious GIF file with invalid width and height values, it could cause the application to crash CVE-2014-0190. Qt4 has been patched to correct this flaw and has been...

MGASA-2014-0240 Updated qt4 packages fix security vulnerability

A NULL pointer dereference flaw was found in QGIFFormat::fillRect in QtGui. If an application using the qt-x11 libraries opened a malicious GIF file with invalid width and height values, it could cause the application to crash CVE-2014-0190. Qt4 has been patched to correct this flaw and has been...

CVE-2014-0190

The CVE-2014-0190 issue affects Qt's GIF handling in QtGui prior to Qt 5.3, where a GIF image with invalid width/height can trigger a NULL pointer dereference leading to a denial of service. Affected component: QtGui GIF decoder (Qt 4.x/Qt5 up to 5.2.x). Root cause: improper validation of GIF dim...

CVE-2014-0190

The GIF decoder in QtGui in Qt before 5.3 allows remote attackers to cause a denial of service NULL pointer dereference via invalid width and height values in a GIF image...

CVE-2014-0190

The GIF decoder in QtGui in Qt before 5.3 allows remote attackers to cause a denial of service NULL pointer dereference via invalid width and height values in a GIF image...

GLSA-201311-14 : QtCore, QtGui: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201311-14 QtCore, QtGui: Multiple vulnerabilities Multiple vulnerabilities have been discovered in QtCore and QtGui. Please review the CVE identifiers referenced below for details. Impact : A remote attacker could entice a user to...

Gentoo Security Advisory GLSA 201206-02 (qt-gui)

The remote host is missing updates announced in advisory GLSA 201206-02. SPDX-FileCopyrightText: 2012 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-only...

Gentoo Security Advisory GLSA 201206-02 (qt-gui)

The remote host is missing updates announced in advisory GLSA 201206-02. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

GLSA-201206-02 : QtGui: User-assisted execution of arbitrary code

The remote host is affected by the vulnerability described in GLSA-201206-02 QtGui: User-assisted execution of arbitrary code An error in qtiffhandler.cpp could cause a buffer overflow. Impact : A remote attacker could entice a user to open a specially crafted TIFF image with an application linke...

QtGui: User-assisted execution of arbitrary code

Background QtGui is a module for the Qt toolkit. Description An error in qtiffhandler.cpp could cause a buffer overflow. Impact A remote attacker could entice a user to open a specially crafted TIFF image with an application linked against QtGui, possibly resulting in execution of arbitrary code...

Fedora 15 : qt-4.7.4-2.fc15 (2011-12193)

QtGui Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C Tenable Network Security,...