Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2015-1860

Опубликовано: 11 мар. 2015
Источник: redhat
CVSS2: 5.1

Описание

Multiple buffer overflows in gui/image/qgifhandler.cpp in the QtBase module in Qt before 4.8.7 and 5.x before 5.4.2 allow remote attackers to cause a denial of service (segmentation fault) and possibly execute arbitrary code via a crafted GIF image.

A memory corruption flaw was found in the way Qt handled certain GIF image files. If a user loaded a specially crafted GIF image file with an application linked against Qt, it could cause the application to crash or, possibly, execute arbitrary code with the privileges of the user running the application.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat Enterprise Linux 5qtWill not fix
Red Hat Enterprise Linux 5qt4Will not fix
Red Hat Enterprise Linux 6qtWill not fix
Red Hat Enterprise Linux 6qt3Will not fix
Red Hat Enterprise Linux 7qtWill not fix
Red Hat Enterprise Linux 7qt3Will not fix

Показывать по

Дополнительная информация

Статус:

Moderate
Дефект:
CWE-122->CWE-125->CWE-787->CWE-805
https://bugzilla.redhat.com/show_bug.cgi?id=1210675qt: segmentation fault in qgifhandler.cpp

5.1 Medium

CVSS2

Связанные уязвимости

ubuntu
больше 10 лет назад

Multiple buffer overflows in gui/image/qgifhandler.cpp in the QtBase module in Qt before 4.8.7 and 5.x before 5.4.2 allow remote attackers to cause a denial of service (segmentation fault) and possibly execute arbitrary code via a crafted GIF image.

nvd
больше 10 лет назад

Multiple buffer overflows in gui/image/qgifhandler.cpp in the QtBase module in Qt before 4.8.7 and 5.x before 5.4.2 allow remote attackers to cause a denial of service (segmentation fault) and possibly execute arbitrary code via a crafted GIF image.

debian
больше 10 лет назад

Multiple buffer overflows in gui/image/qgifhandler.cpp in the QtBase m ...

github
больше 3 лет назад

Multiple buffer overflows in gui/image/qgifhandler.cpp in the QtBase module in Qt before 4.8.7 and 5.x before 5.4.2 allow remote attackers to cause a denial of service (segmentation fault) and possibly execute arbitrary code via a crafted GIF image.

suse-cvrf
больше 10 лет назад

Security update for libqt5-qtbase

5.1 Medium

CVSS2