CVE-2006-4811

Integer overflow in Qt 3.3 before 3.3.7, 4.1 before 4.1.5, and 4.2 before 4.2.1, as used in the KDE khtml library, kdelibs 3.1.3, and possibly other packages, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted pixmap image.

• CWE-189

• ftp://patches.sgi.com/support/free/security/advisories/20061002-01-P
• ftp://patches.sgi.com/support/free/security/advisories/20061101-01-P
• http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=210742
• http://lists.suse.com/archive/suse-security-announce/2006-Oct/0006.html
• http://secunia.com/advisories/22380Patch, Vendor Advisory
• http://secunia.com/advisories/22397Vendor Advisory
• http://secunia.com/advisories/22479Patch, Vendor Advisory
• http://secunia.com/advisories/22485Patch, Vendor Advisory
• http://secunia.com/advisories/22492Patch, Vendor Advisory
• http://secunia.com/advisories/22520Patch, Vendor Advisory
• http://secunia.com/advisories/22579Vendor Advisory
• http://secunia.com/advisories/22586Vendor Advisory
• http://secunia.com/advisories/22589Vendor Advisory
• http://secunia.com/advisories/22645Vendor Advisory
• http://secunia.com/advisories/22738Vendor Advisory
• http://secunia.com/advisories/22890Vendor Advisory
• http://secunia.com/advisories/22929Vendor Advisory
• http://secunia.com/advisories/24347Vendor Advisory
• http://security.gentoo.org/glsa/glsa-200611-02.xml
• http://security.gentoo.org/glsa/glsa-200703-06.xml
• http://securitytracker.com/id?1017084
• http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.483634
• http://www.mandriva.com/security/advisories?name=MDKSA-2006:186
• http://www.mandriva.com/security/advisories?name=MDKSA-2006:187
• http://www.redhat.com/support/errata/RHSA-2006-0720.htmlPatch, Vendor Advisory
• http://www.redhat.com/support/errata/RHSA-2006-0725.htmlVendor Advisory
• http://www.securityfocus.com/archive/1/449173/100/0/threaded
• http://www.securityfocus.com/bid/20599
• http://www.trolltech.com/company/newsroom/announcements/press.2006-10-19.5434451733
• http://www.ubuntu.com/usn/usn-368-1Patch
• http://www.us.debian.org/security/2006/dsa-1200
• http://www.vupen.com/english/advisories/2006/4099Vendor Advisory
• https://issues.rpath.com/browse/RPL-723
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10218
• ftp://patches.sgi.com/support/free/security/advisories/20061002-01-P
• ftp://patches.sgi.com/support/free/security/advisories/20061101-01-P
• http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=210742
• http://lists.suse.com/archive/suse-security-announce/2006-Oct/0006.html
• http://secunia.com/advisories/22380Patch, Vendor Advisory
• http://secunia.com/advisories/22397Vendor Advisory
• http://secunia.com/advisories/22479Patch, Vendor Advisory
• http://secunia.com/advisories/22485Patch, Vendor Advisory
• http://secunia.com/advisories/22492Patch, Vendor Advisory
• http://secunia.com/advisories/22520Patch, Vendor Advisory
• http://secunia.com/advisories/22579Vendor Advisory
• http://secunia.com/advisories/22586Vendor Advisory
• http://secunia.com/advisories/22589Vendor Advisory
• http://secunia.com/advisories/22645Vendor Advisory
• http://secunia.com/advisories/22738Vendor Advisory
• http://secunia.com/advisories/22890Vendor Advisory
• http://secunia.com/advisories/22929Vendor Advisory
• http://secunia.com/advisories/24347Vendor Advisory
• http://security.gentoo.org/glsa/glsa-200611-02.xml
• http://security.gentoo.org/glsa/glsa-200703-06.xml
• http://securitytracker.com/id?1017084
• http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.483634
• http://www.mandriva.com/security/advisories?name=MDKSA-2006:186
• http://www.mandriva.com/security/advisories?name=MDKSA-2006:187
• http://www.redhat.com/support/errata/RHSA-2006-0720.htmlPatch, Vendor Advisory
• http://www.redhat.com/support/errata/RHSA-2006-0725.htmlVendor Advisory
• http://www.securityfocus.com/archive/1/449173/100/0/threaded
• http://www.securityfocus.com/bid/20599
• http://www.trolltech.com/company/newsroom/announcements/press.2006-10-19.5434451733
• http://www.ubuntu.com/usn/usn-368-1Patch
• http://www.us.debian.org/security/2006/dsa-1200
• http://www.vupen.com/english/advisories/2006/4099Vendor Advisory
• https://issues.rpath.com/browse/RPL-723
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10218

Published

Oct 18, 2006

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2006-4805epan/dissectors/packet-xot.c in the XOT dissector (dissect_x…
• CVE-2006-4806Multiple integer overflows in imlib2 allow user-assisted rem…
• CVE-2006-4807loader_tga.c in imlib2 before 1.2.1, and possibly other vers…
• CVE-2006-4808Heap-based buffer overflow in loader_tga.c in imlib2 before …
• CVE-2006-4809Stack-based buffer overflow in loader_pnm.c in imlib2 before…
• CVE-2006-4810Buffer overflow in the readline function in util/texindex.c,…
• CVE-2006-4812Integer overflow in PHP 5 up to 5.1.6 and 4 before 4.3.0 all…
• CVE-2006-4813The __block_prepare_write function in fs/buffer.c for Linux …
• CVE-2006-4814The mincore function in the Linux kernel before 2.4.33.6 doe…
• CVE-2006-4819Heap-based buffer overflow in Opera 9.0 and 9.01 allows remo…
• CVE-2006-4820Unspecified vulnerability in X.25 on HP-UX B.11.00, B.11.11,…
• CVE-2006-4821Cross-site scripting (XSS) vulnerability in the Drupal 4.7 U…