FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

CVE-2014-0190

This CVE name corresponds to:

Entered	Topic
2014-07-19	qt4-imageformats, qt5-gui -- DoS vulnerability in the GIF image handler

The following information is adapted from the Common Vulnerabilities and Exposures (CVE) project. CVE and the CVE logo are trademarks of The MITRE Corporation. CVE content is Copyright 2005, The MITRE Corporation.

CVE-2014-0190 at cve.mitre.org

Details

Type	Candidate
Name	CVE-2014-0190
Phase	Assigned(20131203)

Description

The GIF decoder in QtGui in Qt before 5.3 allows remote attackers to cause a denial of service (NULL pointer dereference) via invalid width and height values in a GIF image.

References

Source	Reference
MLIST	[Announce] 20140424 Qt Security Advisory: DoS vulnerability in the GIF image handler
CONFIRM	https://bugs.kde.org/show_bug.cgi?id=333404
FEDORA	FEDORA-2014-5695
FEDORA	FEDORA-2014-6896
FEDORA	FEDORA-2014-6922
SUSE	openSUSE-SU-2015:0573
BID	67087