PT-2005-3815 · Netpbm+1 · Netpbm+1

Bastien Nocera · Publicado 2005-10-18 · Atualizado 2018-10-03 · CVE-2005-2978

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions netpbm versions prior to 10.25

Description The issue arises when using the -trans option in pnmtopng for converting Portable Anymap (PNM) images to Portable Network Graphics (PNG). It uses uninitialized size and index variables, which could potentially allow attackers to execute arbitrary code by modifying the stack.

Recommendations For versions prior to 10.25, update to version 10.25 or later to resolve the issue.

Exploit

Correção

Identificadores relacionados

CVE-2005-2978

DSA-878-1

RHSA-2005:793

RHSA-2005_793

Produtos afetados

Red Hat

Netpbm

Referências · 22

• 🔥 https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=168278 · Exploit
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10135 · Nota
• http://secunia.com/advisories/17256 · Nota
• https://security-tracker.debian.org/tracker/CVE-2005-2978 · Aviso do Fabricante
• http://secunia.com/advisories/17357 · Nota
• https://rhn.redhat.com/errata/RHSA-2005-793.html · Nota
• http://vupen.com/english/advisories/2005/2133 · Nota
• http://secunia.com/advisories/17221 · Nota
• http://novell.com/linux/security/advisories/2005_24_sr.html · Aviso do Fabricante
• https://usn.ubuntu.com/210-1 · Aviso do Fabricante
• http://secunia.com/advisories/17282 · Nota
• https://osv.dev/vulnerability/CVE-2005-2978 · Aviso do Fabricante
• http://gentoo.org/security/en/glsa/glsa-200510-18.xml · Aviso do Fabricante
• https://redhat.com/security/data/cve/CVE-2005-2978.html · Nota
• http://securitytracker.com/id?1015071 · Nota