CVE-2015-0295 The BMP decoder in QtGui in QT before 5.5 does not properly calculate the masks used to extract the color components, which allows remote attackers to cause a denial of service (divide-by-zero and cra...
MediumCVSS 5.0
EPSS 6.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The BMP decoder in QtGui in QT before 5.5 does not properly calculate the masks used to extract the color components, which allows remote attackers to cause a denial of service (divide-by-zero and crash) via a crafted BMP file.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/qtbase-opensource-src(Debian:12) | < 5.3.2+dfsg-5 | 5.3.2+dfsg-5 |
| debian/qtbase-opensource-src(Debian:13) | < 5.3.2+dfsg-5 | 5.3.2+dfsg-5 |
| debian/qtbase-opensource-src(Debian:14) | < 5.3.2+dfsg-5 | 5.3.2+dfsg-5 |
| fedoraproject fedora | = 20 | No fix listed |
| fedoraproject fedora | = 21 | No fix listed |
| fedoraproject fedora | = 22 | No fix listed |
| opensuse | = 13.1 | No fix listed |
| digia qt | <= 5.4.1 | No fix listed |
References
- Debian Security Tracker CVE-2015-0295 vendor-advisory
- FEDORA-2015-2895 vendor-advisory
- FEDORA-2015-2897 vendor-advisory
- FEDORA-2015-2866 vendor-advisory
- FEDORA-2015-2869 vendor-advisory
- FEDORA-2015-2886 vendor-advisory
- FEDORA-2015-2901 vendor-advisory
- openSUSE-SU-2015:0573 vendor-advisory
- [Announce] 20150227 Qt Security Advisory: DoS vulnerability in the BMP image handler mailing-list vendor-advisory
- 73029 vdb-entry
- USN-2626-1 vendor-advisory
- bugs.debian.org issue-tracking