Red Hat Bugzilla – Bug 128720
CAN-2004-0691 BMP decoder heap overflow
Last modified: 2007-11-30 17:07:03 EST
Chris Evans mentioned QT BMP decoder heap overflow issues to
vendor-sec on Jul28. Konqueror and others use qt to decode bmp files.
Patch available from QT team
Verified crash on RHEL3
CAN-2004-0691 Affects: 2.1AS 2.1AW 2.1ES 2.1WS
CAN-2004-0691 Affects: 3AS 3ES 3WS 3Desktop
Embargo set at August 18th 1400UTC
Created attachment 102533 [details]
Demo bmp file
This is a demo bmp file which will trigger this bug.
it's already built for AS2.1 and RHEL3.
Created attachment 102673 [details]
Patch from 3.3.2 => 3.3.3 which covers these issues plus some more
An errata has been issued which should help the problem
described in this bug report. This report is therefore being
closed with a resolution of ERRATA. For more information
on the solution and/or where to find the updated files,
please follow the link below. You may reopen this bug report
if the solution does not work for you.