Integer overflow in Qt 3.3 before 3.3.7, 4.1 before 4.1.5, and 4.2 before 4.2.1, as used in the KDE khtml library, kdelibs 3.1.3, and possibly other packages, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted pixmap image.
CVSS Details
- CVSS 3.1 Base Score: 6.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Freebsd | — | Upgrade kdelibsUpgrade qt-copyUpgrade kdelibs-nocupsUpgrade qt | Dec 10, 2025 | Oct 22, 2006 |
| Gentoo Linux | — | Upgrade x11-libs/qt.Upgrade app-emulation/emul-linux-x86-qtlibs. | Oct 30, 2017 | Oct 18, 2006 |
| Suse | — | Upgrade libqt4-x11Upgrade libqt4-sql-32bitUpgrade libqt4-sql-sqlite-x86Upgrade libqt4-x11-32bitUpgrade libQtWebKit4-32bitUpgrade libqt4-qt3support-x86Upgrade libqt4-sql-postgresql-x86Upgrade libQtWebKit-develUpgrade libqt4-x86Upgrade libqt4-sql-sqliteUpgrade libqt4-x11-x86Upgrade libqt4-devel-doc-dataUpgrade qt3-devel-toolsUpgrade qt3-x86Upgrade libqt4Upgrade libqt4-sqlUpgrade qt3-devel-docUpgrade qt3-devel-tools-32bitUpgrade libqt4-sql-unixODBC-32bitUpgrade libqt4-sql-sqlite-32bitUpgrade libqt4-sql-mysql-32bitUpgrade libqt4-sql-x86Upgrade qt3Upgrade libqt4-sql-unixODBCUpgrade libqt4-sql-mysqlUpgrade libqt4-sql-postgresql-32bitUpgrade libqt4-sql-postgresqlUpgrade libqt4-qt3supportUpgrade libQtWebKit4Upgrade libqt4-devel-docUpgrade qt3-devel-32bitUpgrade libqt4-qt3support-32bitUpgrade libqt4-sql-unixODBC-x86Upgrade qt4-x11-toolsUpgrade libqt4-32bitUpgrade libQtWebKit4-x86Upgrade qt3-develUpgrade qt3-32bitUpgrade libqt4-sql-mysql-x86Upgrade libqt4-devel | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade libqt3-mtUpgrade libqt3c102Upgrade libqt3c102-mt | Nov 8, 2024 | Oct 18, 2006 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub