CVE-2006-4811
Fixed in a distro release EPSS 5%
Integer overflow in Qt 3.3 before 3.3.7, 4.1 before 4.1.5, and 4.2 before 4.2.1, as used in the KDE khtml library, kdelibs 3.1.3, and possibly other packages, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted pixmap image.
Products: qt, redhat kdelibs
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 3.1 | qt-x11-free | 3:3.3.4-3sarge1 |
| Red Hat Enterprise Linux 2.1 | arts | 6:2.2.2-21.EL2 |
| Red Hat Enterprise Linux 2.1 | kdelibs | 6:2.2.2-21.EL2 |
| Red Hat Enterprise Linux 2.1 | kdelibs-devel | 6:2.2.2-21.EL2 |
| Red Hat Enterprise Linux 2.1 | kdelibs-sound | 6:2.2.2-21.EL2 |
| Red Hat Enterprise Linux 2.1 | kdelibs-sound-devel | 6:2.2.2-21.EL2 |
| Red Hat Enterprise Linux 2.1 | qt | 1:2.3.1-12.EL2 |
| Red Hat Enterprise Linux 2.1 | qt-Xt | 1:2.3.1-12.EL2 |
| Red Hat Enterprise Linux 2.1 | qt-designer | 1:2.3.1-12.EL2 |
| Red Hat Enterprise Linux 2.1 | qt-devel | 1:2.3.1-12.EL2 |
| Red Hat Enterprise Linux 2.1 | qt-static | 1:2.3.1-12.EL2 |
| Red Hat Enterprise Linux 3 | kdelibs | 6:3.1.3-6.12 |
| Red Hat Enterprise Linux 3 | kdelibs-debuginfo | 6:3.1.3-6.12 |
| Red Hat Enterprise Linux 3 | kdelibs-devel | 6:3.1.3-6.12 |
| Red Hat Enterprise Linux 3 | qt | 1:3.1.2-14.RHEL3 |
| Red Hat Enterprise Linux 3 | qt-MySQL | 1:3.1.2-14.RHEL3 |
| Red Hat Enterprise Linux 3 | qt-ODBC | 1:3.1.2-14.RHEL3 |
| Red Hat Enterprise Linux 3 | qt-config | 1:3.1.2-14.RHEL3 |
| Red Hat Enterprise Linux 3 | qt-debuginfo | 1:3.1.2-14.RHEL3 |
| Red Hat Enterprise Linux 3 | qt-designer | 1:3.1.2-14.RHEL3 |
| Red Hat Enterprise Linux 3 | qt-devel | 1:3.1.2-14.RHEL3 |
| Red Hat Enterprise Linux 4 | kdelibs | 6:3.3.1-6.RHEL4 |
| Red Hat Enterprise Linux 4 | kdelibs-debuginfo | 6:3.3.1-6.RHEL4 |
| Red Hat Enterprise Linux 4 | kdelibs-devel | 6:3.3.1-6.RHEL4 |
| Red Hat Enterprise Linux 4 | qt | 1:3.3.3-10.RHEL4 |
| Red Hat Enterprise Linux 4 | qt-MySQL | 1:3.3.3-10.RHEL4 |
| Red Hat Enterprise Linux 4 | qt-ODBC | 1:3.3.3-10.RHEL4 |
| Red Hat Enterprise Linux 4 | qt-PostgreSQL | 1:3.3.3-10.RHEL4 |
| Red Hat Enterprise Linux 4 | qt-config | 1:3.3.3-10.RHEL4 |
| Red Hat Enterprise Linux 4 | qt-debuginfo | 1:3.3.3-10.RHEL4 |
| Red Hat Enterprise Linux 4 | qt-designer | 1:3.3.3-10.RHEL4 |
| Red Hat Enterprise Linux 4 | qt-devel | 1:3.3.3-10.RHEL4 |