CVE-2006-4811

Description

Integer overflow in Qt 3.3 before 3.3.7, 4.1 before 4.1.5, and 4.2 before 4.2.1, as used in the KDE khtml library, kdelibs 3.1.3, and possibly other packages, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted pixmap image.

Affected products

• Qt / Qt3.3.0 – 3.3.0
• Qt / Qt3.3.1 – 3.3.1
• Qt / Qt3.3.2 – 3.3.2
• Qt / Qt3.3.3 – 3.3.3
• Qt / Qt3.3.4 – 3.3.4
• Qt / Qt3.3.5 – 3.3.5
• Qt / Qt3.3.6 – 3.3.6
• Qt / Qt4.1.0 – 4.1.0
• Qt / Qt4.1.1 – 4.1.1
• Qt / Qt4.1.2 – 4.1.2
• Qt / Qt4.1.3 – 4.1.3
• Qt / Qt4.1.4 – 4.1.4
• Qt / Qt4.2.0 – 4.2.0
• RedHat / kdelibs3.1.3 – 3.1.3

References

• MISChttp://securitytracker.com/id?1017084
• MISChttp://www.redhat.com/support/errata/RHSA-2006-0725.html
• VENDOR_ADVISORYhttp://secunia.com/advisories/22738
• VENDOR_ADVISORYhttp://secunia.com/advisories/22485
• VENDOR_ADVISORYhttp://secunia.com/advisories/22586
• MISChttps://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10218
• VENDOR_ADVISORYhttp://secunia.com/advisories/22579
• VENDOR_ADVISORYhttp://secunia.com/advisories/22520
• VENDOR_ADVISORYhttp://secunia.com/advisories/22479
• VENDOR_ADVISORYhttp://www.mandriva.com/security/advisories?name=MDKSA-2006:186
• MISChttp://www.trolltech.com/company/newsroom/announcements/press.2006-10-19.5434451733
• VENDOR_ADVISORYhttp://secunia.com/advisories/22380
• VENDOR_ADVISORYhttp://www.ubuntu.com/usn/usn-368-1
• VENDOR_ADVISORYftp://patches.sgi.com/support/free/security/advisories/20061002-01-P
• VENDOR_ADVISORYhttp://www.mandriva.com/security/advisories?name=MDKSA-2006:187
• VENDOR_ADVISORYhttp://secunia.com/advisories/22645
• MISChttp://www.securityfocus.com/bid/20599
• VENDOR_ADVISORYftp://patches.sgi.com/support/free/security/advisories/20061101-01-P
• MISChttp://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=210742
• MISChttp://security.gentoo.org/glsa/glsa-200703-06.xml
• VENDOR_ADVISORYhttp://secunia.com/advisories/24347
• VENDOR_ADVISORYhttp://secunia.com/advisories/22890
• VENDOR_ADVISORYhttp://secunia.com/advisories/22397
• MISChttp://www.redhat.com/support/errata/RHSA-2006-0720.html
• VENDOR_ADVISORYhttp://secunia.com/advisories/22929
• MISChttp://security.gentoo.org/glsa/glsa-200611-02.xml
• VENDOR_ADVISORYhttp://www.us.debian.org/security/2006/dsa-1200
• VENDOR_ADVISORYhttp://www.vupen.com/english/advisories/2006/4099
• MISChttp://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.483634
• MAILING_LISThttp://lists.suse.com/archive/suse-security-announce/2006-Oct/0006.html
• VENDOR_ADVISORYhttp://secunia.com/advisories/22492
• VENDOR_ADVISORYhttp://secunia.com/advisories/22589
• MISChttps://issues.rpath.com/browse/RPL-723
• MISChttp://www.securityfocus.com/archive/1/449173/100/0/threaded