Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2015-0295

Опубликовано: 25 мар. 2015
Источник: nvd
CVSS2: 5
EPSS Низкий

Описание

The BMP decoder in QtGui in QT before 5.5 does not properly calculate the masks used to extract the color components, which allows remote attackers to cause a denial of service (divide-by-zero and crash) via a crafted BMP file.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:fedoraproject:fedora:20:*:*:*:*:*:*:*
cpe:2.3:o:fedoraproject:fedora:21:*:*:*:*:*:*:*
cpe:2.3:o:fedoraproject:fedora:22:*:*:*:*:*:*:*
Конфигурация 2
cpe:2.3:o:opensuse:opensuse:13.1:*:*:*:*:*:*:*
Конфигурация 3
cpe:2.3:a:digia:qt:*:*:*:*:*:*:*:*
Версия до 5.4.1 (включая)

EPSS

Процентиль: 81%
0.01512
Низкий

5 Medium

CVSS2

Дефекты

CWE-189

Связанные уязвимости

ubuntu
почти 11 лет назад

The BMP decoder in QtGui in QT before 5.5 does not properly calculate the masks used to extract the color components, which allows remote attackers to cause a denial of service (divide-by-zero and crash) via a crafted BMP file.

redhat
почти 11 лет назад

The BMP decoder in QtGui in QT before 5.5 does not properly calculate the masks used to extract the color components, which allows remote attackers to cause a denial of service (divide-by-zero and crash) via a crafted BMP file.

debian
почти 11 лет назад

The BMP decoder in QtGui in QT before 5.5 does not properly calculate ...

github
больше 3 лет назад

The BMP decoder in QtGui in QT before 5.5 does not properly calculate the masks used to extract the color components, which allows remote attackers to cause a denial of service (divide-by-zero and crash) via a crafted BMP file.

suse-cvrf
больше 10 лет назад

Security update for libqt5-qtbase

EPSS

Процентиль: 81%
0.01512
Низкий

5 Medium

CVSS2

Дефекты

CWE-189