Wind River Support Network

HomeDefectsLIN7-155

Fixed

LIN7-155 : Security Advisory - qt - CVE-2014-0190

Created: Jun 17, 2014 Updated: Mar 4, 2016

Resolved Date: Jun 18, 2014

Fix Version: 7.0

Severity: Standard

Applicable for: Wind River Linux 7

Component/s: Userspace

Description

The GIF decoder in QtGui in Qt before 5.3 allows remote attackers to cause a denial of service (NULL pointer dereference) via invalid width and height values in a GIF image.Per: http://cwe.mitre.org/data/definitions/476.html

CWE-476: NULL Pointer Dereference

http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-0190