CVE-2006-4811: qt Numeric Errors

CVSS: 6.8v2.0MediumModified

AliasesRHSA-2006:0720RHSA-2006:0725DSA-1200-1

Published 18-10-2006Last modified 07-08-2024

Some data may be incomplete

2 references with an unsupported link type were hidden.

Vulnerability summary

CVE-2006-4811 is a medium (CVSS 6.8) Numeric Errors vulnerability in qt. EPSS estimates a 4.52% chance of exploitation in the next 30 days, higher than 91.4% of scored vulnerabilities.

Overall risk

28/100

0100

Medium · default modelHow is this calculated?

CVSS score

6.8/10

010

Medium · v2.0 (NVD)

EPSS score

4.52%

0%100%

Low · 0.00 pp in 30 days

KEVNot listedIn no KEV catalog

RansomwareNone recordedNo known use recorded

Public exploits0No public exploits recorded

Timeline

18-10-2006
PublishedVulnerability first disclosed.
07-08-2024
Last modifiedVulnerability information updated.

Description

Integer overflow in Qt 3.3 before 3.3.7, 4.1 before 4.1.5, and 4.2 before 4.2.1, as used in the KDE khtml library, kdelibs 3.1.3, and possibly other packages, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted pixmap image.

CVSS metrics

1 score · 1 source · 1 version

v2.06.8

EPSS trend

Probability

4.52%

Chance of exploitation in the next 30 days

Percentile

91%

Versus all other CVEs

30-day change

0.00 pp

From 4.52% on 19-09-2026

19-09-202619-10-2026

EPSS score

4.52%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

CWE-189Numeric ErrorsWeaknesses in this category are related to improper calculation or conversion of numbers.

Affected systems

Redhat17 products

kdelibs3.1.3
arts< 6:2.2.2-21.EL2
kdelibs< 6:2.2.2-21.EL2 | < 6:3.1.3-6.12 | < 6:3.3.1-6.RHEL4
kdelibs-debuginfo< 6:3.1.3-6.12 | < 6:3.3.1-6.RHEL4
kdelibs-devel< 6:2.2.2-21.EL2 | < 6:3.1.3-6.12 | < 6:3.3.1-6.RHEL4

Show all 17

Debian1 product

qt-x11-free< 3:3.3.4-3sarge1

Qt1 product

qt3.3.0 | 3.3.1 | 3.3.2 | 3.3.3 | 3.3.4 | 3.3.5 | 3.3.6 | 4.1.0 | 4.1.1 | 4.1.2 | 4.1.3 | 4.1.4 | 4.2.0

3 vendors · 19 products

References

44 links

securitytracker.com/id?1017084VDB EntryX Refsource SECTRACK
www.redhat.com/support/errata/RHSA-2006-0725.htmlVendor AdvisoryX Refsource REDHAT
secunia.com/advisories/22738Third Party AdvisoryX Refsource SECUNIAVendor Advisory
secunia.com/advisories/22485Third Party AdvisoryX Refsource SECUNIAPatchVendor Advisory
secunia.com/advisories/22586Third Party AdvisoryX Refsource SECUNIAVendor Advisory
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10218VDB EntrySignatureX Refsource OVAL
secunia.com/advisories/22579Third Party AdvisoryX Refsource SECUNIAVendor Advisory
secunia.com/advisories/22520Third Party AdvisoryX Refsource SECUNIAPatchVendor Advisory
secunia.com/advisories/22479Third Party AdvisoryX Refsource SECUNIAPatchVendor Advisory
www.mandriva.com/security/advisories?name=MDKSA-2006:186Vendor AdvisoryX Refsource MANDRIVA

Show all 44 references

www.trolltech.com/company/newsroom/announcements/press.2006-10-19.5434451733X Refsource CONFIRM
secunia.com/advisories/22380Third Party AdvisoryX Refsource SECUNIAPatchVendor Advisory
www.ubuntu.com/usn/usn-368-1Vendor AdvisoryX Refsource UBUNTUPatch
www.mandriva.com/security/advisories?name=MDKSA-2006:187Vendor AdvisoryX Refsource MANDRIVA
secunia.com/advisories/22645Third Party AdvisoryX Refsource SECUNIAVendor Advisory
www.securityfocus.com/bid/20599VDB EntryX Refsource BID
bugzilla.redhat.com/bugzilla/show_bug.cgi?id=210742X Refsource CONFIRM
security.gentoo.org/glsa/glsa-200703-06.xmlVendor AdvisoryX Refsource GENTOO
secunia.com/advisories/24347Third Party AdvisoryX Refsource SECUNIAVendor Advisory
secunia.com/advisories/22890Third Party AdvisoryX Refsource SECUNIAVendor Advisory
secunia.com/advisories/22397Third Party AdvisoryX Refsource SECUNIAVendor Advisory
www.redhat.com/support/errata/RHSA-2006-0720.htmlVendor AdvisoryX Refsource REDHATPatch
secunia.com/advisories/22929Third Party AdvisoryX Refsource SECUNIAVendor Advisory
security.gentoo.org/glsa/glsa-200611-02.xmlVendor AdvisoryX Refsource GENTOO
www.us.debian.org/security/2006/dsa-1200Vendor AdvisoryX Refsource DEBIAN
www.vupen.com/english/advisories/2006/4099VDB EntryX Refsource VUPENVendor Advisory
slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.483634Vendor AdvisoryX Refsource SLACKWARE
lists.suse.com/archive/suse-security-announce/2006-Oct/0006.htmlVendor AdvisoryX Refsource SUSE
secunia.com/advisories/22492Third Party AdvisoryX Refsource SECUNIAPatchVendor Advisory
secunia.com/advisories/22589Third Party AdvisoryX Refsource SECUNIAVendor Advisory
issues.rpath.com/browse/RPL-723X Refsource CONFIRM
www.securityfocus.com/archive/1/449173/100/0/threadedMailing ListX Refsource BUGTRAQ
access.redhat.com/errata/RHSA-2006:0720Advisory
access.redhat.com/security/updates/classification/ARTICLE
bugzilla.redhat.com/show_bug.cgi?id=210742REPORT
security.access.redhat.com/data/csaf/v2/advisories/2006/rhsa-2006_0720.jsonAdvisory
access.redhat.com/security/cve/CVE-2006-4811REPORT
bugzilla.redhat.com/show_bug.cgi?id=1618204REPORT
www.cve.org/CVERecord?id=CVE-2006-4811Advisory
nvd.nist.gov/vuln/detail/CVE-2006-4811Advisory
access.redhat.com/errata/RHSA-2006:0725Advisory
www.redhat.com/security/updates/classification/ARTICLE
bugzilla.redhat.com/show_bug.cgi?id=211829REPORT
security.access.redhat.com/data/csaf/v2/advisories/2006/rhsa-2006_0725.jsonAdvisory

Vulnerability summary

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References

Related vulnerabilities