PT-2005-4390 · Netpbm+1 · Netpbm+1

Greg Roelofs · Publicado 2005-11-21 · Atualizado 2018-10-03 · CVE-2005-3632

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Média

Vetor base

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions netpbm versions 10.0 and earlier

Description The issue is related to multiple buffer overflows in the pnmtopng component. Attackers can execute arbitrary code by providing a crafted PNM file.

Recommendations For netpbm versions 10.0 and earlier, update to a version later than 10.0 to resolve the issue.

Correção

Identificadores relacionados

CVE-2005-3632

DSA-904-1

RHSA-2005:843

RHSA-2005_843

Produtos afetados

Red Hat

Netpbm

Referências · 20

• http://securityfocus.com/bid/15514 · Nota
• https://rhn.redhat.com/errata/RHSA-2005-843.html · Nota
• https://redhat.com/security/data/cve/CVE-2005-3662.html · Nota
• https://osv.dev/vulnerability/CVE-2005-3632 · Aviso do Fabricante
• https://redhat.com/security/data/cve/CVE-2005-3632.html · Nota
• https://security-tracker.debian.org/tracker/CVE-2005-3632 · Aviso do Fabricante
• http://secunia.com/advisories/17544 · Nota
• http://secunia.com/advisories/17671 · Nota
• http://mandriva.com/security/advisories?name=MDKSA-2005:217 · Aviso do Fabricante
• http://novell.com/linux/security/advisories/2005_28_sr.html · Aviso do Fabricante
• http://redhat.com/support/errata/RHSA-2005-843.html · Aviso do Fabricante
• http://secunia.com/advisories/18186 · Nota
• http://vupen.com/english/advisories/2005/2418 · Nota
• http://secunia.com/advisories/17828 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2005-3632 · Nota de Segurança