The GIF decoder in QtGui in Qt before 5.3 allows remote attackers to cause a denial of service (NULL pointer dereference) via invalid width and height values in a GIF image.
Weakness
The product dereferences a pointer that it expects to be valid but is NULL.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Qt | Qt | * | 5.3.0 (excluding) |
| Qt4-x11 | Ubuntu | esm-infra-legacy/trusty | * |
| Qt4-x11 | Ubuntu | lucid | * |
| Qt4-x11 | Ubuntu | precise | * |
| Qt4-x11 | Ubuntu | quantal | * |
| Qt4-x11 | Ubuntu | saucy | * |
| Qt4-x11 | Ubuntu | trusty | * |
| Qt4-x11 | Ubuntu | trusty/esm | * |
| Qt4-x11 | Ubuntu | upstream | * |
| Qtbase-opensource-src | Ubuntu | saucy | * |
| Qtbase-opensource-src | Ubuntu | trusty | * |
| Qtbase-opensource-src | Ubuntu | upstream | * |
| Qtbase-opensource-src | Ubuntu | vivid/stable-phone-overlay | * |
Potential Mitigations
References
- http://lists.fedoraproject.org/pipermail/package-announce/2014-June/134040.html
- http://lists.fedoraproject.org/pipermail/package-announce/2014-June/134141.html
- http://lists.fedoraproject.org/pipermail/package-announce/2014-May/132395.html
- http://lists.opensuse.org/opensuse-updates/2015-03/msg00068.html
- http://lists.qt-project.org/pipermail/announce/2014-April/000045.html
- http://www.securityfocus.com/bid/67087
- http://www.ubuntu.com/usn/USN-2626-1
- https://bugs.kde.org/show_bug.cgi?id=333404
- http://lists.fedoraproject.org/pipermail/package-announce/2014-June/134040.html
- http://lists.fedoraproject.org/pipermail/package-announce/2014-June/134141.html
- http://lists.fedoraproject.org/pipermail/package-announce/2014-May/132395.html
- http://lists.opensuse.org/opensuse-updates/2015-03/msg00068.html
- http://lists.qt-project.org/pipermail/announce/2014-April/000045.html
- http://www.securityfocus.com/bid/67087
- http://www.ubuntu.com/usn/USN-2626-1
- https://bugs.kde.org/show_bug.cgi?id=333404