PT-2006-7583 · Qt+1 · Qt+1
Josh Bressers
·
Published
1970-01-01
·
Updated
2021-06-16
·
CVE-2006-4811
CVSS v2.0
6.8
Medium
| Vector | AV:N/AC:M/Au:N/C:P/I:P/A:P |
Name of the Vulnerable Software and Affected Versions
qt versions prior to 3.3.7
qt versions prior to 4.1.5
qt versions prior to 4.2.1
qt versions 3.1.2 and earlier
qt version 2.3.1 and earlier
qt version 4.1.4-r2 and earlier
Description
The issue is related to an integer overflow in Qt, which can be exploited remotely to cause a denial of service or possibly execute arbitrary code via a crafted pixmap image. This can lead to a violation of confidentiality, integrity, and availability of protected information.
Recommendations
For qt versions prior to 3.3.7, update to version 3.3.7 or later.
For qt versions prior to 4.1.5, update to version 4.1.5 or later.
For qt versions prior to 4.2.1, update to version 4.2.1 or later.
For qt versions 3.1.2 and earlier, update to a version later than 3.1.2.
For qt version 2.3.1 and earlier, update to a version later than 2.3.1.
For qt version 4.1.4-r2 and earlier, update to a version later than 4.1.4-r2.
Fix
DoS
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Qt
Red Hat