PT-2003-1105 · Netpbm · Netpbm

Al Viro + 1 · Published 2003-03-18 · Updated 2017-07-11 · CVE-2003-0146

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions NetPBM versions 9.20 and earlier

Description The issue involves multiple vulnerabilities that can be exploited remotely, potentially leading to disruption of confidentiality, integrity, and availability of protected information. These vulnerabilities may cause a denial of service or allow the execution of arbitrary code via maths overflow errors, including integer signedness errors or integer overflows that lead to buffer overflows.

Recommendations For versions 9.20 and earlier, update to a version later than 9.20 to resolve the issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability for other affected versions.

Fix

Related Identifiers

BDU:2015-08170

BDU:2015-08171

BDU:2015-08172

CVE-2003-0146

DSA-263

Affected Products

Netpbm

References · 15

• http://debian.org/security/2003/dsa-263 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2003-0146 · Security Note
• https://bdu.fstec.ru/vul/2015-08170 · Security Note
• https://bdu.fstec.ru/vul/2015-08172 · Security Note
• http://redhat.com/support/errata/RHSA-2003-060.html · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2003-0146 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-08171 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2003-0146 · Vendor Advisory
• http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000656 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2003-0146 · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/11463 · Note
• http://marc.info/?l=bugtraq&m=104644687816522&w=2 · Note
• https://rhn.redhat.com/errata/RHSA-2004-030.html · Note
• http://kb.cert.org/vuls/id/630433 · Note
• http://securityfocus.com/bid/6979 · Note