CVE-2014-0190

MÉDIO 4.3CVE-2014-0190 · Published 08/05/2014 · updated 17/06/2026

Em resumo

CVE-2014-0190 é uma vulnerabilidade MÉDIO (CVSS 4.3) que afeta qt (qt).
Chance de exploração nos próximos 30 dias (EPSS): 4.0%, maior que 90.4% das vulnerabilidades.
Correção: atualize para 5.3.0 ou posterior.

Package	Affected versions	Patched versions
qt qt	`< 5.3.0`	`5.3.0`

Description

The GIF decoder in QtGui in Qt before 5.3 allows remote attackers to cause a denial of service (NULL pointer dereference) via invalid width and height values in a GIF image.

References

lists.fedoraproject.org/pipermail/package-announce/2014-June/134040.html · Third Party Advisory
lists.fedoraproject.org/pipermail/package-announce/2014-June/134141.html · Third Party Advisory
lists.fedoraproject.org/pipermail/package-announce/2014-May/132395.html · Third Party Advisory
lists.opensuse.org/opensuse-updates/2015-03/msg00068.html · Third Party Advisory
lists.qt-project.org/pipermail/announce/2014-April/000045.html · Vendor Advisory
securityfocus.com/bid/67087 · Third Party Advisory
ubuntu.com/usn/USN-2626-1 · Third Party Advisory
bugs.kde.org/show_bug.cgi · Issue Tracking

Mais vulnerabilidades de qt

Ver tudo →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

< 5.3.0

5.3.0

Mais vulnerabilidades de qt

Ver tudo →