CVE:CVE-2018-19870
CNNVD:CNNVD-201812-1160
Digia Qt是芬兰Digia公司的一套跨平台的C++应用程序开发框架。该框架可用于开发GUI程序。
Digia Qt 5.11.3之前版本中的QGifHandler存在空指针逆向引用漏洞。攻击者可借助畸形的GIP图像利用该漏洞造成段错误。
solution:Upgrade qt qt to a higher version than 5.11.3,and avoid the version (,5.11.3); Upgrade debian debian_linux to a higher version than 8.0,9.0,and avoid the version 8.0,9.0; Upgrade opensuse leap to a higher version than 15.0,and avoid the version 15.0