Watch, Follow, &
Connect with Us

ID: 29913, BMP Buffer Overflow hotfix - Delphi, C++Builder, RAD Studio XE6

by Calvin Tang Email: Anonymous


This hotfix addresses a potential security vulnerability has been identified in the VCL when processing BMP files.
English, French, German and Japanese
This hotfix was updated on October 10, 2014 to address files in the redist directory as well.

Available only to registered users of Delphi, C++Builder and RAD Studio XE6 and All-Access

Download Details
FTP  download also available
CDN Login Required to Download. (You will be redirected to the login page if you click on the Download Link)
Network License Users

If you are a network license user, click  here  to download this submission.

To download this, you must have registered [one of]:
All-Access Bronze
All-Access Gold
All-Access Platinum
All-Access Silver
All-Access XE Bronze
All-Access XE Gold
All-Access XE Gold Academic
All-Access XE Platinum
All-Access XE Silver
C++Builder XE6 Architect 10 Named Users
C++Builder XE6 Architect 10 Named Users (Upgrade from XE2 or later)
C++Builder XE6 Architect 5 Named Users
C++Builder XE6 Architect 5 Named Users (Upgrade from XE2 or later)
C++Builder XE6 Architect Academic Named User License
C++Builder XE6 Architect Academic Network License
C++Builder XE6 Architect Named User
C++Builder XE6 Architect Named User (Upgrade from C++Builder Starter)
C++Builder XE6 Architect Named User (Upgrade from XE2 or later)
C++Builder XE6 Architect Named User Upgrade Recharge from C++Builder XE5 Arch
C++Builder XE6 Architect Network License
C++Builder XE6 Enterprise 10 Named Users
C++Builder XE6 Enterprise 10 Named Users (Upgrade from XE2 or later)
C++Builder XE6 Enterprise 5 Named Users
C++Builder XE6 Enterprise 5 Named Users (Upgrade from XE2 or later)
C++Builder XE6 Enterprise Academic Named User License
C++Builder XE6 Enterprise Academic Network License
C++Builder XE6 Enterprise Named User
C++Builder XE6 Enterprise Named User (Upgrade from C++Builder Starter)
C++Builder XE6 Enterprise Named User (Upgrade from XE2 or later)
C++Builder XE6 Enterprise Named User Upgrade Recharge from C++Builder XE5 Ent
C++Builder XE6 Enterprise Network License
C++Builder XE6 Professional 10 Named Users
C++Builder XE6 Professional 10 Named Users (Upgrade from XE2 or later)
C++Builder XE6 Professional 5 Named Users
C++Builder XE6 Professional 5 Named Users (Upgrade from XE2 or later)
C++Builder XE6 Professional Academic Named User License
C++Builder XE6 Professional Academic Network License
C++Builder XE6 Professional C/S Academic Network License
C++Builder XE6 Professional C/S Network License
C++Builder XE6 Professional Named User
C++Builder XE6 Professional Named User (Upgrade from C++Builder Starter)
C++Builder XE6 Professional Named User (Upgrade from XE2 or later)
C++Builder XE6 Professional Named User Upgrade Recharge from C++Builder XE5 Pro
C++Builder XE6 Professional Network License
C++Builder XE6 Starter Named User
C++Builder XE6 Starter Named User DevRel Edition 1 year
C++Builder XE6 Ultimate 10 Named Users
C++Builder XE6 Ultimate 10 Named Users (Upgrade from XE2 or later)
C++Builder XE6 Ultimate 5 Named Users
C++Builder XE6 Ultimate 5 Named Users (Upgrade from XE2 or later)
C++Builder XE6 Ultimate Named User
C++Builder XE6 Ultimate Named User (Upgrade from C++Builder Starter)
C++Builder XE6 Ultimate Named User (Upgrade from XE2 or later)
C++Builder XE6 Ultimate Named User Upgrade Recharge from C++Builder XE5 Ult
C++Builder XE6 Ultimate Network
Delphi XE6 Architect 10 Named Users
Delphi XE6 Architect 10 Named Users (Upgrade from XE2 or later)
Delphi XE6 Architect 5 Named Users
Delphi XE6 Architect 5 Named Users (Upgrade from XE2 or later)
Delphi XE6 Architect Academic Named User License
Delphi XE6 Architect Academic Network License
Delphi XE6 Architect Named User
Delphi XE6 Architect Named User (Upgrade Recharge from Delphi XE5 Architect)
Delphi XE6 Architect Named User (Upgrade from Delphi Starter)
Delphi XE6 Architect Named User (Upgrade from XE2 or later)
Delphi XE6 Architect Network License
Delphi XE6 Enterprise 10 Named Users
Delphi XE6 Enterprise 10 Named Users (Upgrade from XE2 or later)
Delphi XE6 Enterprise 5 Named Users
Delphi XE6 Enterprise 5 Named Users (Upgrade from XE2 or later)
Delphi XE6 Enterprise Academic Named User License
Delphi XE6 Enterprise Academic Network License
Delphi XE6 Enterprise Named User
Delphi XE6 Enterprise Named User (Upgrade Recharge from Delphi XE5 Enterprise)
Delphi XE6 Enterprise Named User (Upgrade from Delphi Starter)
Delphi XE6 Enterprise Named User (Upgrade from XE2 or later)
Delphi XE6 Enterprise Network License
Delphi XE6 Professional 10 Named Users
Delphi XE6 Professional 10 Named Users (Upgrade from XE2 or later)
Delphi XE6 Professional 5 Named Users
Delphi XE6 Professional 5 Named Users (Upgrade from XE2 or later)
Delphi XE6 Professional Academic Named User License
Delphi XE6 Professional Academic Network License
Delphi XE6 Professional C/S Academic Network License
Delphi XE6 Professional Named User
Delphi XE6 Professional Named User (Upgrade Recharge from Delphi XE5 Pro)
Delphi XE6 Professional Named User (Upgrade from Delphi Starter)
Delphi XE6 Professional Named User (Upgrade from XE2 or later)
Delphi XE6 Professional Network License
Delphi XE6 Starter Named User
Delphi XE6 Starter Named User DevRel Edition 1 year
Delphi XE6 Ultimate 10 Named Users
Delphi XE6 Ultimate 10 Named Users (Upgrade from XE2 or later)
Delphi XE6 Ultimate 5 Named Users
Delphi XE6 Ultimate 5 Named Users (Upgrade from XE2 or later)
Delphi XE6 Ultimate Named User
Delphi XE6 Ultimate Named User (Upgrade Recharge from Delphi XE5 Ultimate)
Delphi XE6 Ultimate Named User (Upgrade from Delphi Starter)
Delphi XE6 Ultimate Named User (Upgrade from XE2 or later)
Delphi XE6 Ultimate Network
Mobile Add-On Pack for C++Builder XE6 Professional
Mobile Add-On Pack for Delphi XE6 Professional
Mobile Add-On Pack for Delphi XE6 Professional Network License
Mobile Add-On Pack for Delphi XE6 Professional Network License - Upgrade
Mobile Add-On Pack for Delphi XE6 Professional Upgrade from XE5 Mobile Pack
Mobile Add-On pack for Delphi XE6 Professional - 10 Named Users
Mobile Add-On pack for Delphi XE6 Professional - 5 Named Users
RAD Studio XE6 Architect 10 Named Users
RAD Studio XE6 Architect 10 Named Users Upgrade from XE2 or later
RAD Studio XE6 Architect 5 Named Users
RAD Studio XE6 Architect 5 Named Users Upgrade from XE2 or later
RAD Studio XE6 Architect Academic Named User License
RAD Studio XE6 Architect Academic Network License
RAD Studio XE6 Architect Named User
RAD Studio XE6 Architect Named User Upgrade Recharge from RAD Studio XE5 Arch
RAD Studio XE6 Architect Named User Upgrade from Starters or HTML5 Builder
RAD Studio XE6 Architect Named User Upgrade from XE2 or later
RAD Studio XE6 Architect Network License
RAD Studio XE6 Enterprise 1 year Term
RAD Studio XE6 Enterprise 10 Named Users
RAD Studio XE6 Enterprise 10 Named Users Upgrade from XE2 or later
RAD Studio XE6 Enterprise 5 Named Users
RAD Studio XE6 Enterprise 5 Named Users Upgrade from XE2 or later
RAD Studio XE6 Enterprise Academic Named User License
RAD Studio XE6 Enterprise Academic Network License
RAD Studio XE6 Enterprise DevRel edition 1 year
RAD Studio XE6 Enterprise Named User
RAD Studio XE6 Enterprise Named User Upgrade Recharge from RAD Studio XE5 Ent
RAD Studio XE6 Enterprise Named User Upgrade from Starters or HTML5 Builder
RAD Studio XE6 Enterprise Named User Upgrade from XE2 or later
RAD Studio XE6 Enterprise Network License
RAD Studio XE6 Professional 10 Named Users
RAD Studio XE6 Professional 10 Named Users Upgrade from XE2 or later
RAD Studio XE6 Professional 5 Named Users
RAD Studio XE6 Professional 5 Named Users Upgrade from XE2 or later
RAD Studio XE6 Professional Academic Named User License
RAD Studio XE6 Professional Academic Network License
RAD Studio XE6 Professional C/S Academic Network License
RAD Studio XE6 Professional C/S Network License
RAD Studio XE6 Professional Named User
RAD Studio XE6 Professional Named User Upgrade Recharge from RAD Studio XE5 Pro
RAD Studio XE6 Professional Named User Upgrade from Starters or HTML5 Builder
RAD Studio XE6 Professional Named User Upgrade from XE2 or later
RAD Studio XE6 Professional Network License
RAD Studio XE6 Ultimate 10 Named Users
RAD Studio XE6 Ultimate 10 Named Users Upgrade from XE2 or later
RAD Studio XE6 Ultimate 5 Named Users
RAD Studio XE6 Ultimate 5 Named Users Upgrade from XE2 or later
RAD Studio XE6 Ultimate Named User
RAD Studio XE6 Ultimate Named User Upgrade from XE2 or later
RAD Studio XE6 Ultimate Named User Upgrade Recharge from RAD Studio XE5 Ultimate
RAD Studio XE6 Ultimate Named User Upgrade from Starters or RadPHP
RAD Studio XE6 Ultimate Network

For RAD Studio, Version 20.0  to 20.0
Copyright: All rights reserved


Size: 81,371,572 bytes
Updated on Fri, 10 Oct 2014 08:29:08 GMT
Originally uploaded on Fri, 15 Aug 2014 08:25:20 GMT
SHA1 Hash: 23CEA62402D02B04D17A58005E003F96E3C93922
MD5 Hash: 540052C54464E12563B15F663EE2F734

    Explore the files in this upload

Description
This hotfix addresses a potential security vulnerability has been identified in the VCL when processing BMP files. This vulnerability could allow an attacker to craft a BMP file that produces a buffer overflow and therefore allows it to execute arbitrary code.

For older version of the product, please refer to this Support article.

English, French, German and Japanese

This hotfix was updated on October 10, 2014 to address files in the redist directory as well.

Available only to registered users of Delphi, C++Builder and RAD Studio XE6 and All-Access

Server Response from: ETNACDC03