CVE-2006-4811
Integer overflow in Qt 3.3 before 3.3.7, 4.1 before 4.1.5, and 4.2 before 4.2.1, as used in the...
6.8 MediumFix available
Integer overflow in Qt 3.3 before 3.3.7, 4.1 before 4.1.5, and 4.2 before 4.2.1, as used in the KDE khtml library, kdelibs 3.1.3, and possibly other packages, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted pixmap image.
Exploit likelihood
4.52%Down 2.1 points since Feb 4, 2022
What each source reports
NVD Score used
Integer overflow in Qt 3.3 before 3.3.7, 4.1 before 4.1.5, and 4.2 before 4.2.1, as used in the KDE khtml library, kdelibs 3.1.3, and possibly other packages, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted pixmap image.
- Record
CVE-2006-4811- CVSS 2.0
- 6.8 Medium
AV:N/AC:M/Au:N/C:P/I:P/A:P - Weakness
- CWE-189
- Updated
- 2026-11-02
CVE List No score
Integer overflow in Qt 3.3 before 3.3.7, 4.1 before 4.1.5, and 4.2 before 4.2.1, as used in the KDE khtml library, kdelibs 3.1.3, and possibly other packages, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted pixmap image.
- Record
CVE-2006-4811- Updated
- 2026-11-02
EUVDEUVD-2006-4798 No score
Integer overflow in Qt 3.3 before 3.3.7, 4.1 before 4.1.5, and 4.2 before 4.2.1, as used in the KDE khtml library, kdelibs 3.1.3, and possibly other packages, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted pixmap image.
- Record
EUVD-2006-4798- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-55vc-fmpc-5q9q No score
Integer overflow in Qt 3.3 before 3.3.7, 4.1 before 4.1.5, and 4.2 before 4.2.1, as used in the...
Integer overflow in Qt 3.3 before 3.3.7, 4.1 before 4.1.5, and 4.2 before 4.2.1, as used in the KDE khtml library, kdelibs 3.1.3, and possibly other packages, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted pixmap image.
- Record
GHSA-55vc-fmpc-5q9q- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
qt-x11-freeDebian:3.1 |
before 3:3.3.4-3sarge1, plus listed versions 3:3.3.4-3 |
3:3.3.4-3sarge1 |
artsRed Hat:enterprise_linux:2.1::as |
before 6:2.2.2-21.EL2 | 6:2.2.2-21.EL2 |
kdelibsRed Hat:enterprise_linux:2.1::as |
before 6:2.2.2-21.EL2 | 6:2.2.2-21.EL2 |
kdelibs-develRed Hat:enterprise_linux:2.1::as |
before 6:2.2.2-21.EL2 | 6:2.2.2-21.EL2 |
kdelibs-soundRed Hat:enterprise_linux:2.1::as |
before 6:2.2.2-21.EL2 | 6:2.2.2-21.EL2 |
kdelibs-sound-develRed Hat:enterprise_linux:2.1::as |
before 6:2.2.2-21.EL2 | 6:2.2.2-21.EL2 |
artsRed Hat:enterprise_linux:2.1::aw |
before 6:2.2.2-21.EL2 | 6:2.2.2-21.EL2 |
kdelibsRed Hat:enterprise_linux:2.1::aw |
before 6:2.2.2-21.EL2 | 6:2.2.2-21.EL2 |
kdelibs-develRed Hat:enterprise_linux:2.1::aw |
before 6:2.2.2-21.EL2 | 6:2.2.2-21.EL2 |
kdelibs-soundRed Hat:enterprise_linux:2.1::aw |
before 6:2.2.2-21.EL2 | 6:2.2.2-21.EL2 |
Show 115 moreShow less
| Package | Affected | Fixed |
|---|---|---|
kdelibs-sound-develRed Hat:enterprise_linux:2.1::aw |
before 6:2.2.2-21.EL2 | 6:2.2.2-21.EL2 |
artsRed Hat:enterprise_linux:2.1::es |
before 6:2.2.2-21.EL2 | 6:2.2.2-21.EL2 |
kdelibsRed Hat:enterprise_linux:2.1::es |
before 6:2.2.2-21.EL2 | 6:2.2.2-21.EL2 |
kdelibs-develRed Hat:enterprise_linux:2.1::es |
before 6:2.2.2-21.EL2 | 6:2.2.2-21.EL2 |
kdelibs-soundRed Hat:enterprise_linux:2.1::es |
before 6:2.2.2-21.EL2 | 6:2.2.2-21.EL2 |
kdelibs-sound-develRed Hat:enterprise_linux:2.1::es |
before 6:2.2.2-21.EL2 | 6:2.2.2-21.EL2 |
artsRed Hat:enterprise_linux:2.1::ws |
before 6:2.2.2-21.EL2 | 6:2.2.2-21.EL2 |
kdelibsRed Hat:enterprise_linux:2.1::ws |
before 6:2.2.2-21.EL2 | 6:2.2.2-21.EL2 |
kdelibs-develRed Hat:enterprise_linux:2.1::ws |
before 6:2.2.2-21.EL2 | 6:2.2.2-21.EL2 |
kdelibs-soundRed Hat:enterprise_linux:2.1::ws |
before 6:2.2.2-21.EL2 | 6:2.2.2-21.EL2 |
kdelibs-sound-develRed Hat:enterprise_linux:2.1::ws |
before 6:2.2.2-21.EL2 | 6:2.2.2-21.EL2 |
kdelibsRed Hat:enterprise_linux:3::as |
before 6:3.1.3-6.12 | 6:3.1.3-6.12 |
kdelibs-debuginfoRed Hat:enterprise_linux:3::as |
before 6:3.1.3-6.12 | 6:3.1.3-6.12 |
kdelibs-develRed Hat:enterprise_linux:3::as |
before 6:3.1.3-6.12 | 6:3.1.3-6.12 |
kdelibsRed Hat:enterprise_linux:3::desktop |
before 6:3.1.3-6.12 | 6:3.1.3-6.12 |
kdelibs-debuginfoRed Hat:enterprise_linux:3::desktop |
before 6:3.1.3-6.12 | 6:3.1.3-6.12 |
kdelibs-develRed Hat:enterprise_linux:3::desktop |
before 6:3.1.3-6.12 | 6:3.1.3-6.12 |
kdelibsRed Hat:enterprise_linux:3::es |
before 6:3.1.3-6.12 | 6:3.1.3-6.12 |
kdelibs-debuginfoRed Hat:enterprise_linux:3::es |
before 6:3.1.3-6.12 | 6:3.1.3-6.12 |
kdelibs-develRed Hat:enterprise_linux:3::es |
before 6:3.1.3-6.12 | 6:3.1.3-6.12 |
kdelibsRed Hat:enterprise_linux:3::ws |
before 6:3.1.3-6.12 | 6:3.1.3-6.12 |
kdelibs-debuginfoRed Hat:enterprise_linux:3::ws |
before 6:3.1.3-6.12 | 6:3.1.3-6.12 |
kdelibs-develRed Hat:enterprise_linux:3::ws |
before 6:3.1.3-6.12 | 6:3.1.3-6.12 |
kdelibsRed Hat:enterprise_linux:4::as |
before 6:3.3.1-6.RHEL4 | 6:3.3.1-6.RHEL4 |
kdelibs-debuginfoRed Hat:enterprise_linux:4::as |
before 6:3.3.1-6.RHEL4 | 6:3.3.1-6.RHEL4 |
kdelibs-develRed Hat:enterprise_linux:4::as |
before 6:3.3.1-6.RHEL4 | 6:3.3.1-6.RHEL4 |
kdelibsRed Hat:enterprise_linux:4::desktop |
before 6:3.3.1-6.RHEL4 | 6:3.3.1-6.RHEL4 |
kdelibs-debuginfoRed Hat:enterprise_linux:4::desktop |
before 6:3.3.1-6.RHEL4 | 6:3.3.1-6.RHEL4 |
kdelibs-develRed Hat:enterprise_linux:4::desktop |
before 6:3.3.1-6.RHEL4 | 6:3.3.1-6.RHEL4 |
kdelibsRed Hat:enterprise_linux:4::es |
before 6:3.3.1-6.RHEL4 | 6:3.3.1-6.RHEL4 |
kdelibs-debuginfoRed Hat:enterprise_linux:4::es |
before 6:3.3.1-6.RHEL4 | 6:3.3.1-6.RHEL4 |
kdelibs-develRed Hat:enterprise_linux:4::es |
before 6:3.3.1-6.RHEL4 | 6:3.3.1-6.RHEL4 |
kdelibsRed Hat:enterprise_linux:4::ws |
before 6:3.3.1-6.RHEL4 | 6:3.3.1-6.RHEL4 |
kdelibs-debuginfoRed Hat:enterprise_linux:4::ws |
before 6:3.3.1-6.RHEL4 | 6:3.3.1-6.RHEL4 |
kdelibs-develRed Hat:enterprise_linux:4::ws |
before 6:3.3.1-6.RHEL4 | 6:3.3.1-6.RHEL4 |
qtRed Hat:enterprise_linux:2.1::as |
before 1:2.3.1-12.EL2 | 1:2.3.1-12.EL2 |
qt-XtRed Hat:enterprise_linux:2.1::as |
before 1:2.3.1-12.EL2 | 1:2.3.1-12.EL2 |
qt-designerRed Hat:enterprise_linux:2.1::as |
before 1:2.3.1-12.EL2 | 1:2.3.1-12.EL2 |
qt-develRed Hat:enterprise_linux:2.1::as |
before 1:2.3.1-12.EL2 | 1:2.3.1-12.EL2 |
qt-staticRed Hat:enterprise_linux:2.1::as |
before 1:2.3.1-12.EL2 | 1:2.3.1-12.EL2 |
qtRed Hat:enterprise_linux:2.1::aw |
before 1:2.3.1-12.EL2 | 1:2.3.1-12.EL2 |
qt-XtRed Hat:enterprise_linux:2.1::aw |
before 1:2.3.1-12.EL2 | 1:2.3.1-12.EL2 |
qt-designerRed Hat:enterprise_linux:2.1::aw |
before 1:2.3.1-12.EL2 | 1:2.3.1-12.EL2 |
qt-develRed Hat:enterprise_linux:2.1::aw |
before 1:2.3.1-12.EL2 | 1:2.3.1-12.EL2 |
qt-staticRed Hat:enterprise_linux:2.1::aw |
before 1:2.3.1-12.EL2 | 1:2.3.1-12.EL2 |
qtRed Hat:enterprise_linux:2.1::es |
before 1:2.3.1-12.EL2 | 1:2.3.1-12.EL2 |
qt-XtRed Hat:enterprise_linux:2.1::es |
before 1:2.3.1-12.EL2 | 1:2.3.1-12.EL2 |
qt-designerRed Hat:enterprise_linux:2.1::es |
before 1:2.3.1-12.EL2 | 1:2.3.1-12.EL2 |
qt-develRed Hat:enterprise_linux:2.1::es |
before 1:2.3.1-12.EL2 | 1:2.3.1-12.EL2 |
qt-staticRed Hat:enterprise_linux:2.1::es |
before 1:2.3.1-12.EL2 | 1:2.3.1-12.EL2 |
qtRed Hat:enterprise_linux:2.1::ws |
before 1:2.3.1-12.EL2 | 1:2.3.1-12.EL2 |
qt-XtRed Hat:enterprise_linux:2.1::ws |
before 1:2.3.1-12.EL2 | 1:2.3.1-12.EL2 |
qt-designerRed Hat:enterprise_linux:2.1::ws |
before 1:2.3.1-12.EL2 | 1:2.3.1-12.EL2 |
qt-develRed Hat:enterprise_linux:2.1::ws |
before 1:2.3.1-12.EL2 | 1:2.3.1-12.EL2 |
qt-staticRed Hat:enterprise_linux:2.1::ws |
before 1:2.3.1-12.EL2 | 1:2.3.1-12.EL2 |
qtRed Hat:enterprise_linux:3::as |
before 1:3.1.2-14.RHEL3 | 1:3.1.2-14.RHEL3 |
qt-MySQLRed Hat:enterprise_linux:3::as |
before 1:3.1.2-14.RHEL3 | 1:3.1.2-14.RHEL3 |
qt-ODBCRed Hat:enterprise_linux:3::as |
before 1:3.1.2-14.RHEL3 | 1:3.1.2-14.RHEL3 |
qt-configRed Hat:enterprise_linux:3::as |
before 1:3.1.2-14.RHEL3 | 1:3.1.2-14.RHEL3 |
qt-debuginfoRed Hat:enterprise_linux:3::as |
before 1:3.1.2-14.RHEL3 | 1:3.1.2-14.RHEL3 |
qt-designerRed Hat:enterprise_linux:3::as |
before 1:3.1.2-14.RHEL3 | 1:3.1.2-14.RHEL3 |
qt-develRed Hat:enterprise_linux:3::as |
before 1:3.1.2-14.RHEL3 | 1:3.1.2-14.RHEL3 |
qtRed Hat:enterprise_linux:3::desktop |
before 1:3.1.2-14.RHEL3 | 1:3.1.2-14.RHEL3 |
qt-MySQLRed Hat:enterprise_linux:3::desktop |
before 1:3.1.2-14.RHEL3 | 1:3.1.2-14.RHEL3 |
qt-ODBCRed Hat:enterprise_linux:3::desktop |
before 1:3.1.2-14.RHEL3 | 1:3.1.2-14.RHEL3 |
qt-configRed Hat:enterprise_linux:3::desktop |
before 1:3.1.2-14.RHEL3 | 1:3.1.2-14.RHEL3 |
qt-debuginfoRed Hat:enterprise_linux:3::desktop |
before 1:3.1.2-14.RHEL3 | 1:3.1.2-14.RHEL3 |
qt-designerRed Hat:enterprise_linux:3::desktop |
before 1:3.1.2-14.RHEL3 | 1:3.1.2-14.RHEL3 |
qt-develRed Hat:enterprise_linux:3::desktop |
before 1:3.1.2-14.RHEL3 | 1:3.1.2-14.RHEL3 |
qtRed Hat:enterprise_linux:3::es |
before 1:3.1.2-14.RHEL3 | 1:3.1.2-14.RHEL3 |
qt-MySQLRed Hat:enterprise_linux:3::es |
before 1:3.1.2-14.RHEL3 | 1:3.1.2-14.RHEL3 |
qt-ODBCRed Hat:enterprise_linux:3::es |
before 1:3.1.2-14.RHEL3 | 1:3.1.2-14.RHEL3 |
qt-configRed Hat:enterprise_linux:3::es |
before 1:3.1.2-14.RHEL3 | 1:3.1.2-14.RHEL3 |
qt-debuginfoRed Hat:enterprise_linux:3::es |
before 1:3.1.2-14.RHEL3 | 1:3.1.2-14.RHEL3 |
qt-designerRed Hat:enterprise_linux:3::es |
before 1:3.1.2-14.RHEL3 | 1:3.1.2-14.RHEL3 |
qt-develRed Hat:enterprise_linux:3::es |
before 1:3.1.2-14.RHEL3 | 1:3.1.2-14.RHEL3 |
qtRed Hat:enterprise_linux:3::ws |
before 1:3.1.2-14.RHEL3 | 1:3.1.2-14.RHEL3 |
qt-MySQLRed Hat:enterprise_linux:3::ws |
before 1:3.1.2-14.RHEL3 | 1:3.1.2-14.RHEL3 |
qt-ODBCRed Hat:enterprise_linux:3::ws |
before 1:3.1.2-14.RHEL3 | 1:3.1.2-14.RHEL3 |
qt-configRed Hat:enterprise_linux:3::ws |
before 1:3.1.2-14.RHEL3 | 1:3.1.2-14.RHEL3 |
qt-debuginfoRed Hat:enterprise_linux:3::ws |
before 1:3.1.2-14.RHEL3 | 1:3.1.2-14.RHEL3 |
qt-designerRed Hat:enterprise_linux:3::ws |
before 1:3.1.2-14.RHEL3 | 1:3.1.2-14.RHEL3 |
qt-develRed Hat:enterprise_linux:3::ws |
before 1:3.1.2-14.RHEL3 | 1:3.1.2-14.RHEL3 |
qtRed Hat:enterprise_linux:4::as |
before 1:3.3.3-10.RHEL4 | 1:3.3.3-10.RHEL4 |
qt-MySQLRed Hat:enterprise_linux:4::as |
before 1:3.3.3-10.RHEL4 | 1:3.3.3-10.RHEL4 |
qt-ODBCRed Hat:enterprise_linux:4::as |
before 1:3.3.3-10.RHEL4 | 1:3.3.3-10.RHEL4 |
qt-PostgreSQLRed Hat:enterprise_linux:4::as |
before 1:3.3.3-10.RHEL4 | 1:3.3.3-10.RHEL4 |
qt-configRed Hat:enterprise_linux:4::as |
before 1:3.3.3-10.RHEL4 | 1:3.3.3-10.RHEL4 |
qt-debuginfoRed Hat:enterprise_linux:4::as |
before 1:3.3.3-10.RHEL4 | 1:3.3.3-10.RHEL4 |
qt-designerRed Hat:enterprise_linux:4::as |
before 1:3.3.3-10.RHEL4 | 1:3.3.3-10.RHEL4 |
qt-develRed Hat:enterprise_linux:4::as |
before 1:3.3.3-10.RHEL4 | 1:3.3.3-10.RHEL4 |
qtRed Hat:enterprise_linux:4::desktop |
before 1:3.3.3-10.RHEL4 | 1:3.3.3-10.RHEL4 |
qt-MySQLRed Hat:enterprise_linux:4::desktop |
before 1:3.3.3-10.RHEL4 | 1:3.3.3-10.RHEL4 |
qt-ODBCRed Hat:enterprise_linux:4::desktop |
before 1:3.3.3-10.RHEL4 | 1:3.3.3-10.RHEL4 |
qt-PostgreSQLRed Hat:enterprise_linux:4::desktop |
before 1:3.3.3-10.RHEL4 | 1:3.3.3-10.RHEL4 |
qt-configRed Hat:enterprise_linux:4::desktop |
before 1:3.3.3-10.RHEL4 | 1:3.3.3-10.RHEL4 |
qt-debuginfoRed Hat:enterprise_linux:4::desktop |
before 1:3.3.3-10.RHEL4 | 1:3.3.3-10.RHEL4 |
qt-designerRed Hat:enterprise_linux:4::desktop |
before 1:3.3.3-10.RHEL4 | 1:3.3.3-10.RHEL4 |
qt-develRed Hat:enterprise_linux:4::desktop |
before 1:3.3.3-10.RHEL4 | 1:3.3.3-10.RHEL4 |
qtRed Hat:enterprise_linux:4::es |
before 1:3.3.3-10.RHEL4 | 1:3.3.3-10.RHEL4 |
qt-MySQLRed Hat:enterprise_linux:4::es |
before 1:3.3.3-10.RHEL4 | 1:3.3.3-10.RHEL4 |
qt-ODBCRed Hat:enterprise_linux:4::es |
before 1:3.3.3-10.RHEL4 | 1:3.3.3-10.RHEL4 |
qt-PostgreSQLRed Hat:enterprise_linux:4::es |
before 1:3.3.3-10.RHEL4 | 1:3.3.3-10.RHEL4 |
qt-configRed Hat:enterprise_linux:4::es |
before 1:3.3.3-10.RHEL4 | 1:3.3.3-10.RHEL4 |
qt-debuginfoRed Hat:enterprise_linux:4::es |
before 1:3.3.3-10.RHEL4 | 1:3.3.3-10.RHEL4 |
qt-designerRed Hat:enterprise_linux:4::es |
before 1:3.3.3-10.RHEL4 | 1:3.3.3-10.RHEL4 |
qt-develRed Hat:enterprise_linux:4::es |
before 1:3.3.3-10.RHEL4 | 1:3.3.3-10.RHEL4 |
qtRed Hat:enterprise_linux:4::ws |
before 1:3.3.3-10.RHEL4 | 1:3.3.3-10.RHEL4 |
qt-MySQLRed Hat:enterprise_linux:4::ws |
before 1:3.3.3-10.RHEL4 | 1:3.3.3-10.RHEL4 |
qt-ODBCRed Hat:enterprise_linux:4::ws |
before 1:3.3.3-10.RHEL4 | 1:3.3.3-10.RHEL4 |
qt-PostgreSQLRed Hat:enterprise_linux:4::ws |
before 1:3.3.3-10.RHEL4 | 1:3.3.3-10.RHEL4 |
qt-configRed Hat:enterprise_linux:4::ws |
before 1:3.3.3-10.RHEL4 | 1:3.3.3-10.RHEL4 |
qt-debuginfoRed Hat:enterprise_linux:4::ws |
before 1:3.3.3-10.RHEL4 | 1:3.3.3-10.RHEL4 |
qt-designerRed Hat:enterprise_linux:4::ws |
before 1:3.3.3-10.RHEL4 | 1:3.3.3-10.RHEL4 |
qt-develRed Hat:enterprise_linux:4::ws |
before 1:3.3.3-10.RHEL4 | 1:3.3.3-10.RHEL4 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2006-4811 is a medium vulnerability (CVSS 6.8) in Qt, published October 18, 2006. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 4.52%, the 91st percentile. Fixed in qt-x11-free 3:3.3.4-3sarge1.
References
securitytracker.com/id?1017084
redhat.com/support/errata/RHSA-2006-0725.html
secunia.com/advisories/22738
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10218
Show 39 moreShow less
mandriva.com/security/advisories?name=MDKSA-2006:186
trolltech.com/company/newsroom/announcements/press.2006-10-19.5434451733
ubuntu.com/usn/usn-368-1
securityfocus.com/bid/20599
bugzilla.redhat.com/bugzilla/show_bug.cgi?id=210742
security.gentoo.org/glsa/glsa-200703-06.xml
us.debian.org/security/2006/dsa-1200
vupen.com/english/advisories/2006/4099
slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.483634
lists.suse.com/archive/suse-security-announce/2006-Oct/0006.html
issues.rpath.com/browse/RPL-723
nvd.nist.gov/vuln/detail/CVE-2006-4811
github.com/advisories/GHSA-55vc-fmpc-5q9q
access.redhat.com/errata/RHSA-2006:0720
security.access.redhat.com/data/csaf/v2/advisories/2006/rhsa-2006_0720.json
cve.org/CVERecord?id=CVE-2006-4811