View at Official ubuntu advisory, NVD, CVE.org · CVE detail
Freshness: upstream tracker timestamp is available; use API updated time as primary recency signal.
CVE-2015-1859 low priority: Ubuntu including 2 source packages (qt4-x11, qtbase-opensource-src), 12 status rows across 6 suites (lucid, precise, trusty, upstream, utopic, vivid): released 7, DNE 2, needs-triage 2, ignored 1.
Multiple buffer overflows in plugins/imageformats/ico/qicohandler.cpp in the QtBase module in Qt before 4.8.7 and 5.x before 5.4.2 allow remote attackers to cause a denial of service (segmentation fault and crash) and possibly execute arbitrary code via a crafted ICO image.