Multiple buffer overflows in gui/image/qbmphandler.cpp in the QtBase module in Qt before 4.8.7 and 5.x before 5.4.2 allow remote attackers to cause a denial of service (segmentation fault and crash) and possibly execute arbitrary code via a crafted BMP image.
References
Link | Resource |
---|---|
http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155424.html | Third Party Advisory |
http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155927.html | Patch Third Party Advisory |
http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155962.html | Third Party Advisory |
http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155976.html | Third Party Advisory |
http://lists.fedoraproject.org/pipermail/package-announce/2015-April/156727.html | Third Party Advisory |
http://lists.qt-project.org/pipermail/announce/2015-April/000067.html | Patch Vendor Advisory |
http://www.securityfocus.com/bid/74309 | Third Party Advisory VDB Entry |
http://www.ubuntu.com/usn/USN-2626-1 | |
https://codereview.qt-project.org/#/c/108312/ | Patch |
https://security.gentoo.org/glsa/201603-10 |
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
History
No history.
Information
Published : 2015-05-12 19:59
Updated : 2024-02-28 15:21
NVD link : CVE-2015-1858
Mitre link : CVE-2015-1858
CVE.ORG link : CVE-2015-1858
JSON object : View
Products Affected
qt
- qt
digia
- qt
fedoraproject
- fedora
CWE
CWE-119
Improper Restriction of Operations within the Bounds of a Memory Buffer