Unscored severity · published Mar 25, 2015
CVE-2015-0295
The BMP decoder in QtGui in QT before 5.5 does not properly calculate the masks used to extract the color components, which allows remote attackers to cause a denial of service…
–
CVSS
6.1%
EPSS
No
On KEV
Description
The BMP decoder in QtGui in QT before 5.5 does not properly calculate the masks used to extract the color components, which allows remote attackers to cause a denial of service (divide-by-zero and crash) via a crafted BMP file.
Exploitation
Is it being used?
Exploit prediction (EPSS)6.1% · higher than 93% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
FE
Fedora · Fedoraproject
20; 21; 22 · source: NVD
OP
Opensuse · Opensuse
13.1 · source: NVD
QT
QT · Digia
through 5.4.1 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2015-0295
CVE.org
https://www.cve.org/CVERecord?id=CVE-2015-0295
lists.fedoraproject.org
http://lists.fedoraproject.org/pipermail/package-announce/2015-March/150800.html
lists.fedoraproject.org
http://lists.fedoraproject.org/pipermail/package-announce/2015-March/150940.html
lists.fedoraproject.org
http://lists.fedoraproject.org/pipermail/package-announce/2015-March/151034.html
lists.fedoraproject.org
http://lists.fedoraproject.org/pipermail/package-announce/2015-March/151121.html
lists.fedoraproject.org
http://lists.fedoraproject.org/pipermail/package-announce/2015-March/151138.html
lists.fedoraproject.org
http://lists.fedoraproject.org/pipermail/package-announce/2015-March/151352.html
More from QT
–
CVE-2015-1860
Multiple buffer overflows in gui/image/qgifhandler.cpp in the QtBase module in Qt before 4.8.7 and 5.x before 5.4.2 allow remote attackers to cause a denial of service…
–
CVE-2015-1859
Multiple buffer overflows in plugins/imageformats/ico/qicohandler.cpp in the QtBase module in Qt before 4.8.7 and 5.x before 5.4.2 allow remote attackers to cause a denial of…
–
CVE-2015-1858
Multiple buffer overflows in gui/image/qbmphandler.cpp in the QtBase module in Qt before 4.8.7 and 5.x before 5.4.2 allow remote attackers to cause a denial of service…
–
CVE-2013-4549
QXmlSimpleReader in Qt before 5.2 allows context-dependent attackers to cause a denial of service (memory consumption) via an XML Entity Expansion (XEE) attack
–
CVE-2012-5624
The XMLHttpRequest object in Qt before 4.8.4 enables http redirection to the file scheme, which allows man-in-the-middle attackers to force the read of arbitrary local files and…