CVE-2006-4811

Published: Oct 18, 2006Modified: Apr 23, 2026

6.8

Vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Exploitability: 8.6 / Impact: 6.4

Source: NVD

Description

Integer overflow in Qt 3.3 before 3.3.7, 4.1 before 4.1.5, and 4.2 before 4.2.1, as used in the KDE khtml library, kdelibs 3.1.3, and possibly other packages, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted pixmap image.

Affected (14)

Products: Qt: Qt · Redhat: Kdelibs

1 product

Redhat

1 product

Kdelibs

Configuration A

14 vulnerable

Vulnerable Software	Affected Versions
Qt Qt	Version 3.3.0
Qt Qt	Version 3.3.1
Qt Qt	Version 3.3.2
Qt Qt	Version 3.3.3
Qt Qt	Version 3.3.4
Qt Qt	Version 3.3.5
Qt Qt	Version 3.3.6
Qt Qt	Version 4.1.0
Qt Qt	Version 4.1.1
Qt Qt	Version 4.1.2
Qt Qt	Version 4.1.3
Qt Qt	Version 4.1.4
Qt Qt	Version 4.2.0
Redhat Kdelibs	Version 3.1.3

Related CWEs

CWE-189

References (68)

ftp://patches.sgi.com/support/free/security/advisories/20061002-01-P (unsafe URL)

Source: secalert@redhat.com

ftp://patches.sgi.com/support/free/security/advisories/20061101-01-P (unsafe URL)

Source: secalert@redhat.com

http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=210742

Source: secalert@redhat.com

http://lists.suse.com/archive/suse-security-announce/2006-Oct/0006.html

Source: secalert@redhat.com

http://secunia.com/advisories/22380

Source: secalert@redhat.com

PatchVendor Advisory

http://secunia.com/advisories/22397

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/22479

Source: secalert@redhat.com

PatchVendor Advisory

http://secunia.com/advisories/22485

Source: secalert@redhat.com

PatchVendor Advisory

http://secunia.com/advisories/22492

Source: secalert@redhat.com

PatchVendor Advisory

http://secunia.com/advisories/22520

Source: secalert@redhat.com

PatchVendor Advisory

http://secunia.com/advisories/22579

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/22586

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/22589

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/22645

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/22738

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/22890

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/22929

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/24347

Source: secalert@redhat.com

Vendor Advisory

http://security.gentoo.org/glsa/glsa-200611-02.xml

Source: secalert@redhat.com

http://security.gentoo.org/glsa/glsa-200703-06.xml

Source: secalert@redhat.com

http://securitytracker.com/id?1017084

Source: secalert@redhat.com

http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.483634

Source: secalert@redhat.com

http://www.mandriva.com/security/advisories?name=MDKSA-2006:186

Source: secalert@redhat.com

http://www.mandriva.com/security/advisories?name=MDKSA-2006:187

Source: secalert@redhat.com

http://www.redhat.com/support/errata/RHSA-2006-0720.html

Source: secalert@redhat.com

PatchVendor Advisory

http://www.redhat.com/support/errata/RHSA-2006-0725.html

Source: secalert@redhat.com

Vendor Advisory

http://www.securityfocus.com/archive/1/449173/100/0/threaded

Source: secalert@redhat.com

http://www.securityfocus.com/bid/20599

Source: secalert@redhat.com

http://www.trolltech.com/company/newsroom/announcements/press.2006-10-19.5434451733

Source: secalert@redhat.com

http://www.ubuntu.com/usn/usn-368-1

Source: secalert@redhat.com

Patch

http://www.us.debian.org/security/2006/dsa-1200

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2006/4099

Source: secalert@redhat.com

Vendor Advisory

https://issues.rpath.com/browse/RPL-723

Source: secalert@redhat.com

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10218

Source: secalert@redhat.com

ftp://patches.sgi.com/support/free/security/advisories/20061002-01-P (unsafe URL)