CVSS: 7.5EPSS: 1%CPEs: 8EXPL: 0CVE-2014-0190 – Gentoo Linux Security Advisory 201412-25
https://notcve.org/view.php?id=CVE-2014-0190
08 May 2014 — The GIF decoder in QtGui in Qt before 5.3 allows remote attackers to cause a denial of service (NULL pointer dereference) via invalid width and height values in a GIF image. El decodificador GIF en QtGui en Qt anterior a 5.3 permite a atacantes remotos causar una denegación de servicio (referencia a puntero nulo) a través de valores de ancho y alto inválidos en un imagen GIF. Wolfgang Schenk discovered that Qt incorrectly handled certain malformed GIF images. If a user or automated system were tricked into ... • http://lists.fedoraproject.org/pipermail/package-announce/2014-June/134040.html • CWE-476: NULL Pointer Dereference •
CVSS: 7.5EPSS: 5%CPEs: 4EXPL: 0CVE-2013-4549 – Ubuntu Security Notice USN-2057-1
https://notcve.org/view.php?id=CVE-2013-4549
18 Dec 2013 — QXmlSimpleReader in Qt before 5.2 allows context-dependent attackers to cause a denial of service (memory consumption) via an XML Entity Expansion (XEE) attack. QXmlSimpleReader en Qt anterior a v5.2 permite a los atacantes dependientes del contexto provocar una denegación de servicio (consumo de memoria) mediante un ataque XML Entity Expansion (XEE). It was discovered that QXmlSimpleReader in Qt incorrectly handled XML entity expansion. An attacker could use this flaw to cause Qt applications to consume la... • http://blog.qt.digia.com/blog/2014/04/24/qt-4-8-6-released • CWE-20: Improper Input Validation •