Description
Integer overflow in Qt 3.3 before 3.3.7, 4.1 before 4.1.5, and 4.2 before 4.2.1, as used in the KDE khtml library, kdelibs 3.1.3, and possibly other packages, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted pixmap image.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 3.1 | qt-x11-free | 3:3.3.4-3sarge1 | DSA-1200-1 |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 4 | kdelibs +1 | 6:3.3.1-6.RHEL4 | RHSA-2006:0720 |
| RHEL 4 | qt +6 | 1:3.3.3-10.RHEL4 | RHSA-2006:0725 |
| RHEL 3 | kdelibs +1 | 6:3.1.3-6.12 | RHSA-2006:0720 |
| RHEL 3 | qt +5 | 1:3.1.2-14.RHEL3 | RHSA-2006:0725 |
| RHEL 2 | arts +4 | 6:2.2.2-21.EL2 | RHSA-2006:0720 |
| RHEL 2 | qt +4 | 1:2.3.1-12.EL2 | RHSA-2006:0725 |
Advisories 3
- RHSA-2006:0725 Red Hat Security Advisory: qt security update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- RHSA-2006:0720 Red Hat Security Advisory: kdelibs security update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- DSA-1200-1 qt-x11-free - integer overflow Debian Security (DSA / DLA) · Mar 9, 2026
References
- 1017084 vdb-entry
- RHSA-2006:0725 vendor-advisory
- 22738 third-party-advisory
- 22485 third-party-advisory
- 22586 third-party-advisory
- oval:org.mitre.oval:def:10218 vdb-entry signature
- 22579 third-party-advisory
- 22520 third-party-advisory
- 22479 third-party-advisory
- MDKSA-2006:186 vendor-advisory
- http://www.trolltech.com/company/newsroom/announcements/press.2006-10-19.5434451733
- 22380 third-party-advisory
- USN-368-1 vendor-advisory
- MDKSA-2006:187 vendor-advisory
- 22645 third-party-advisory
- 20599 vdb-entry
- http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=210742
- GLSA-200703-06 vendor-advisory
- 24347 third-party-advisory
- 22890 third-party-advisory
- 22397 third-party-advisory
- RHSA-2006:0720 vendor-advisory
- 22929 third-party-advisory
- GLSA-200611-02 vendor-advisory
- DSA-1200 vendor-advisory
- ADV-2006-4099 vdb-entry
- SSA:2006-298-01 vendor-advisory
- SUSE-SA:2006:063 vendor-advisory
- 22492 third-party-advisory
- 22589 third-party-advisory
- https://issues.rpath.com/browse/RPL-723
- 20061018 rPSA-2006-0195-1 kdelibs mailing-list