CVE-2015-1859

Description

Multiple buffer overflows in plugins/imageformats/ico/qicohandler.cpp in the QtBase module in Qt before 4.8.7 and 5.x before 5.4.2 allow remote attackers to cause a denial of service (segmentation fault and crash) and possibly execute arbitrary code via a crafted ICO image.

How to fix CVE-2015-1859

To remediate CVE-2015-1859, upgrade the affected package to a fixed version below.

• Debian/qtbase-opensource-src—upgrade to 5.3.2+dfsg-5 or later

Is CVE-2015-1859 being exploited?

Low — EPSS is 4.4%, meaning exploitation activity has not been observed at scale.

Affected packages (1)

• from 0, < 5.3.2+dfsg-5

References (1)

• ADVISORYsecurity-tracker.debian.org/tracker/CVE-2015-1859