PT-2015-4563 · Qt Company+3 · Qt+3

Fabian Vogt · Publicado 2015-03-12 · Atualizado 2024-06-15 · CVE-2015-0295

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Qt versions prior to 5.5

Description The issue concerns a flaw in the BMP decoder within QtGui in Qt, where it fails to correctly calculate masks for extracting color components. This flaw can be exploited by remote attackers using a specially crafted BMP file, leading to a denial of service through a divide-by-zero error that causes the application to crash.

Recommendations For versions prior to 5.5, update to version 5.5 or later to resolve the issue.

Correção

DoS

Enumeração de Fraquezas

CWE-189

Identificadores relacionados

ALT-PU-2015-1496

ALT-PU-2015-1498

ALT-PU-2015-1499

ALT-PU-2015-1500

ALT-PU-2015-1504

ALT-PU-2015-1508

ALT-PU-2015-1509

ALT-PU-2015-1510

ALT-PU-2015-1511

ALT-PU-2015-1512

ALT-PU-2015-1513

ALT-PU-2015-1514

ALT-PU-2015-1515

ALT-PU-2015-1516

ALT-PU-2015-1517

ALT-PU-2015-1518

ALT-PU-2015-1519

ALT-PU-2015-1520

ALT-PU-2015-1521

ALT-PU-2015-1522

CVE-2015-0295

DLA-210-1

MGASA-2015-0105

OPENSUSE-SU-2024:10180-1

OPENSUSE-SU-2024:10287-1

OPENSUSE-SU-2024:10456-1

SUSE-SU-2015:0977-1

SUSE-SU-2015:1359-1

SUSE-SU-2015:1383-1

SUSE-SU-2015_0977-1

SUSE-SU-2015_1359-1

SUSE-SU-2015_1383-1

USN-2626-1

Produtos afetados

Alt Linux

Qt

Suse

Ubuntu

Referências · 82

• https://osv.dev/vulnerability/openSUSE-SU-2024:10287-1 · Aviso do Fabricante
• https://bugzilla.suse.com/927806 · Nota
• http://lists.fedoraproject.org/pipermail/package-announce/2015-March/151352.html · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2015-1858 · Nota
• https://ubuntu.com/security/CVE-2015-0295 · Aviso do Fabricante
• https://errata.altlinux.org/ALT-PU-2015-1504 · Aviso do Fabricante
• https://security-tracker.debian.org/tracker/CVE-2015-0295 · Aviso do Fabricante
• http://lists.suse.com/mailman/listinfo/sle-security-updates · Nota
• https://lists.suse.com/pipermail/sle-security-updates/2015-August/001528.html · Nota
• https://errata.altlinux.org/ALT-PU-2015-1513 · Aviso do Fabricante
• https://errata.altlinux.org/ALT-PU-2015-1515 · Aviso do Fabricante
• https://errata.altlinux.org/ALT-PU-2015-1520 · Aviso do Fabricante
• http://ubuntu.com/usn/USN-2626-1 · Aviso do Fabricante
• https://osv.dev/vulnerability/SUSE-SU-2015:1383-1 · Aviso do Fabricante
• https://bugzilla.suse.com/921999 · Nota