CVE-2015-0295

EPSS 1.55%
Published 25.03.2015 14:59:01
Last modified 12.04.2025 10:46:40
Source secalert@redhat.com
Teams watchlist Login
Open Login

The BMP decoder in QtGui in QT before 5.5 does not properly calculate the masks used to extract the color components, which allows remote attackers to cause a denial of service (divide-by-zero and crash) via a crafted BMP file.

Affected products Warnungen 0 Metrics 2 CWE 0 References 13

Data is provided by the National Vulnerability Database (NVD)

Fedoraproject ≫ Fedora Version20

Fedoraproject ≫ Fedora Version21

Fedoraproject ≫ Fedora Version22

Opensuse ≫ Opensuse Version13.1

Digia ≫ Qt Version <= 5.4.1

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	1.55%	0.807

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	5	10	2.9	AV:N/AC:L/Au:N/C:N/I:N/A:P

http://lists.opensuse.org/opensuse-updates/2015-03/msg00068.html

http://www.ubuntu.com/usn/USN-2626-1

http://lists.fedoraproject.org/pipermail/package-announce/2015-March/150800.html

http://lists.fedoraproject.org/pipermail/package-announce/2015-March/150940.html

http://lists.fedoraproject.org/pipermail/package-announce/2015-March/151034.html

http://lists.fedoraproject.org/pipermail/package-announce/2015-March/151121.html

http://lists.fedoraproject.org/pipermail/package-announce/2015-March/151138.html

http://lists.fedoraproject.org/pipermail/package-announce/2015-March/151352.html

http://lists.qt-project.org/pipermail/announce/2015-February/000059.html

Vendor Advisory

http://www.securityfocus.com/bid/73029

https://nvd.nist.gov/vuln/detail/CVE-2015-0295

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2015-0295

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2015-0295

EUVD