CVEvulnerability
CVE-2006-4811
6.8 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2006-10-18
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-189
Description
Integer overflow in Qt 3.3 before 3.3.7, 4.1 before 4.1.5, and 4.2 before 4.2.1, as used in the KDE khtml library, kdelibs 3.1.3, and possibly other packages, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted pixmap image.
Affected configurations
• qt qt 3.3.0
• qt qt 3.3.1
• qt qt 3.3.2
• qt qt 3.3.3
• qt qt 3.3.4
• qt qt 3.3.5
• qt qt 3.3.6
• qt qt 4.1.0
• qt qt 4.1.1
• qt qt 4.1.2
• qt qt 4.1.3
• qt qt 4.1.4
• qt qt 4.2.0
• redhat kdelibs 3.1.3
Related
Weakness · not in database (1)
References
- ftp://patches.sgi.com/support/free/security/advisories/20061002-01-P patches.sgi.com
- ftp://patches.sgi.com/support/free/security/advisories/20061101-01-P patches.sgi.com
- http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=210742 bugzilla.redhat.com
- http://lists.suse.com/archive/suse-security-announce/2006-Oct/0006.html lists.suse.com
- http://secunia.com/advisories/22380 Patch, Vendor Advisory
- http://secunia.com/advisories/22397 Vendor Advisory
- http://secunia.com/advisories/22479 Patch, Vendor Advisory
- http://secunia.com/advisories/22485 Patch, Vendor Advisory
- http://secunia.com/advisories/22492 Patch, Vendor Advisory
- http://secunia.com/advisories/22520 Patch, Vendor Advisory
- http://secunia.com/advisories/22579 Vendor Advisory
- http://secunia.com/advisories/22586 Vendor Advisory
- http://secunia.com/advisories/22589 Vendor Advisory
- http://secunia.com/advisories/22645 Vendor Advisory
- http://secunia.com/advisories/22738 Vendor Advisory
- http://secunia.com/advisories/22890 Vendor Advisory
- http://secunia.com/advisories/22929 Vendor Advisory
- http://secunia.com/advisories/24347 Vendor Advisory
- http://security.gentoo.org/glsa/glsa-200611-02.xml security.gentoo.org
- http://security.gentoo.org/glsa/glsa-200703-06.xml security.gentoo.org
- http://securitytracker.com/id?1017084 securitytracker.com
- http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.483634 slackware.com
- http://www.mandriva.com/security/advisories?name=MDKSA-2006:186 www.mandriva.com
- http://www.mandriva.com/security/advisories?name=MDKSA-2006:187 www.mandriva.com
- http://www.redhat.com/support/errata/RHSA-2006-0720.html Patch, Vendor Advisory
- http://www.redhat.com/support/errata/RHSA-2006-0725.html Vendor Advisory
- http://www.securityfocus.com/archive/1/449173/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/20599 www.securityfocus.com
- http://www.trolltech.com/company/newsroom/announcements/press.2006-10-19.5434451733 www.trolltech.com
- http://www.ubuntu.com/usn/usn-368-1 Patch
- http://www.us.debian.org/security/2006/dsa-1200 www.us.debian.org
- http://www.vupen.com/english/advisories/2006/4099 Vendor Advisory
- https://issues.rpath.com/browse/RPL-723 issues.rpath.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10218 oval.cisecurity.org
- ftp://patches.sgi.com/support/free/security/advisories/20061002-01-P patches.sgi.com
- ftp://patches.sgi.com/support/free/security/advisories/20061101-01-P patches.sgi.com
- http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=210742 bugzilla.redhat.com
- http://lists.suse.com/archive/suse-security-announce/2006-Oct/0006.html lists.suse.com
- http://secunia.com/advisories/22380 Patch, Vendor Advisory
- http://secunia.com/advisories/22397 Vendor Advisory
- http://secunia.com/advisories/22479 Patch, Vendor Advisory
- http://secunia.com/advisories/22485 Patch, Vendor Advisory
- http://secunia.com/advisories/22492 Patch, Vendor Advisory
- http://secunia.com/advisories/22520 Patch, Vendor Advisory
- http://secunia.com/advisories/22579 Vendor Advisory
- http://secunia.com/advisories/22586 Vendor Advisory
- http://secunia.com/advisories/22589 Vendor Advisory
- http://secunia.com/advisories/22645 Vendor Advisory
- http://secunia.com/advisories/22738 Vendor Advisory
- http://secunia.com/advisories/22890 Vendor Advisory
- http://secunia.com/advisories/22929 Vendor Advisory
- http://secunia.com/advisories/24347 Vendor Advisory
- http://security.gentoo.org/glsa/glsa-200611-02.xml security.gentoo.org
- http://security.gentoo.org/glsa/glsa-200703-06.xml security.gentoo.org
- http://securitytracker.com/id?1017084 securitytracker.com
- http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.483634 slackware.com
- http://www.mandriva.com/security/advisories?name=MDKSA-2006:186 www.mandriva.com
- http://www.mandriva.com/security/advisories?name=MDKSA-2006:187 www.mandriva.com
- http://www.redhat.com/support/errata/RHSA-2006-0720.html Patch, Vendor Advisory
- http://www.redhat.com/support/errata/RHSA-2006-0725.html Vendor Advisory
- http://www.securityfocus.com/archive/1/449173/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/20599 www.securityfocus.com
- http://www.trolltech.com/company/newsroom/announcements/press.2006-10-19.5434451733 www.trolltech.com
- http://www.ubuntu.com/usn/usn-368-1 Patch
- http://www.us.debian.org/security/2006/dsa-1200 www.us.debian.org
- http://www.vupen.com/english/advisories/2006/4099 Vendor Advisory
- https://issues.rpath.com/browse/RPL-723 issues.rpath.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10218 oval.cisecurity.org