PT-2015-4563 · Qt Company+3 · Qt+3

Fabian Vogt · Published 2015-03-12 · Updated 2024-06-15 · CVE-2015-0295

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Qt versions prior to 5.5

Description The issue concerns a flaw in the BMP decoder within QtGui in Qt, where it fails to correctly calculate masks for extracting color components. This flaw can be exploited by remote attackers using a specially crafted BMP file, leading to a denial of service through a divide-by-zero error that causes the application to crash.

Recommendations For versions prior to 5.5, update to version 5.5 or later to resolve the issue.

Fix

DoS

Weakness Enumeration

CWE-189

Related Identifiers

ALT-PU-2015-1496

ALT-PU-2015-1498

ALT-PU-2015-1499

ALT-PU-2015-1500

ALT-PU-2015-1504

ALT-PU-2015-1508

ALT-PU-2015-1509

ALT-PU-2015-1510

ALT-PU-2015-1511

ALT-PU-2015-1512

ALT-PU-2015-1513

ALT-PU-2015-1514

ALT-PU-2015-1515

ALT-PU-2015-1516

ALT-PU-2015-1517

ALT-PU-2015-1518

ALT-PU-2015-1519

ALT-PU-2015-1520

ALT-PU-2015-1521

ALT-PU-2015-1522

CVE-2015-0295

DLA-210-1

MGASA-2015-0105

OPENSUSE-SU-2024:10180-1

OPENSUSE-SU-2024:10287-1

OPENSUSE-SU-2024:10456-1

SUSE-SU-2015:0977-1

SUSE-SU-2015:1359-1

SUSE-SU-2015:1383-1

SUSE-SU-2015_0977-1

SUSE-SU-2015_1359-1

SUSE-SU-2015_1383-1

USN-2626-1

Affected Products

Alt Linux

Qt

Suse

Ubuntu

References · 82

• https://osv.dev/vulnerability/openSUSE-SU-2024:10287-1 · Vendor Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2015-March/151352.html · Vendor Advisory
• https://ubuntu.com/security/CVE-2015-0295 · Vendor Advisory
• https://errata.altlinux.org/ALT-PU-2015-1504 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2015-0295 · Vendor Advisory
• https://errata.altlinux.org/ALT-PU-2015-1513 · Vendor Advisory
• https://errata.altlinux.org/ALT-PU-2015-1515 · Vendor Advisory
• https://errata.altlinux.org/ALT-PU-2015-1520 · Vendor Advisory
• http://ubuntu.com/usn/USN-2626-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2015:1383-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2015-1860 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2015-0295 · Security Note
• http://lists.fedoraproject.org/pipermail/package-announce/2015-March/151034.html · Vendor Advisory
• https://errata.altlinux.org/ALT-PU-2015-1514 · Vendor Advisory
• https://errata.altlinux.org/ALT-PU-2015-1509 · Vendor Advisory