CVE-2006-4811

Severity: medium (CVSS 6.8 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 4.5% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2006-10-18 · updated 2026-06-16
Weakness: CWE-189

Description

Integer overflow in Qt 3.3 before 3.3.7, 4.1 before 4.1.5, and 4.2 before 4.2.1, as used in the KDE khtml library, kdelibs 3.1.3, and possibly other packages, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted pixmap image.

Affected products

Qt: 3.3.0, 3.3.1, 3.3.2, 3.3.3, 3.3.4, 3.3.5 (+7)
RedHat Kdelibs: 3.1.3

References

http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=210742
http://lists.suse.com/archive/suse-security-announce/2006-Oct/0006.html
http://secunia.com/advisories/22380
http://secunia.com/advisories/22397
http://secunia.com/advisories/22479
http://secunia.com/advisories/22485
http://secunia.com/advisories/22492
http://secunia.com/advisories/22520
http://secunia.com/advisories/22579
http://secunia.com/advisories/22586

Get alerted when CVE-2006-4811 or the next vulnerability affects your stack