1. CVE-Search
  2. CVE-2005-2978
ID CVE-2005-2978
Summary pnmtopng in netpbm before 10.25, when using the -trans option, uses uninitialized size and index variables when converting Portable Anymap (PNM) images to Portable Network Graphics (PNG), which might allow attackers to execute arbitrary code by modifying the stack.
References
Vulnerable Configurations
  • cpe:2.3:a:netpbm:netpbm:10.0:*:*:*:*:*:*:*
    cpe:2.3:a:netpbm:netpbm:10.0:*:*:*:*:*:*:*
  • cpe:2.3:a:netpbm:netpbm:10.1:*:*:*:*:*:*:*
    cpe:2.3:a:netpbm:netpbm:10.1:*:*:*:*:*:*:*
  • cpe:2.3:a:netpbm:netpbm:10.2:*:*:*:*:*:*:*
    cpe:2.3:a:netpbm:netpbm:10.2:*:*:*:*:*:*:*
  • cpe:2.3:a:netpbm:netpbm:10.3:*:*:*:*:*:*:*
    cpe:2.3:a:netpbm:netpbm:10.3:*:*:*:*:*:*:*
  • cpe:2.3:a:netpbm:netpbm:10.4:*:*:*:*:*:*:*
    cpe:2.3:a:netpbm:netpbm:10.4:*:*:*:*:*:*:*
  • cpe:2.3:a:netpbm:netpbm:10.5:*:*:*:*:*:*:*
    cpe:2.3:a:netpbm:netpbm:10.5:*:*:*:*:*:*:*
  • cpe:2.3:a:netpbm:netpbm:10.6:*:*:*:*:*:*:*
    cpe:2.3:a:netpbm:netpbm:10.6:*:*:*:*:*:*:*
  • cpe:2.3:a:netpbm:netpbm:10.7:*:*:*:*:*:*:*
    cpe:2.3:a:netpbm:netpbm:10.7:*:*:*:*:*:*:*
  • cpe:2.3:a:netpbm:netpbm:10.8:*:*:*:*:*:*:*
    cpe:2.3:a:netpbm:netpbm:10.8:*:*:*:*:*:*:*
  • cpe:2.3:a:netpbm:netpbm:10.9:*:*:*:*:*:*:*
    cpe:2.3:a:netpbm:netpbm:10.9:*:*:*:*:*:*:*
  • cpe:2.3:a:netpbm:netpbm:10.10:*:*:*:*:*:*:*
    cpe:2.3:a:netpbm:netpbm:10.10:*:*:*:*:*:*:*
  • cpe:2.3:a:netpbm:netpbm:10.11:*:*:*:*:*:*:*
    cpe:2.3:a:netpbm:netpbm:10.11:*:*:*:*:*:*:*
  • cpe:2.3:a:netpbm:netpbm:10.12:*:*:*:*:*:*:*
    cpe:2.3:a:netpbm:netpbm:10.12:*:*:*:*:*:*:*
  • cpe:2.3:a:netpbm:netpbm:10.13:*:*:*:*:*:*:*
    cpe:2.3:a:netpbm:netpbm:10.13:*:*:*:*:*:*:*
  • cpe:2.3:a:netpbm:netpbm:10.14:*:*:*:*:*:*:*
    cpe:2.3:a:netpbm:netpbm:10.14:*:*:*:*:*:*:*
  • cpe:2.3:a:netpbm:netpbm:10.15:*:*:*:*:*:*:*
    cpe:2.3:a:netpbm:netpbm:10.15:*:*:*:*:*:*:*
  • cpe:2.3:a:netpbm:netpbm:10.16:*:*:*:*:*:*:*
    cpe:2.3:a:netpbm:netpbm:10.16:*:*:*:*:*:*:*
  • cpe:2.3:a:netpbm:netpbm:10.17:*:*:*:*:*:*:*
    cpe:2.3:a:netpbm:netpbm:10.17:*:*:*:*:*:*:*
  • cpe:2.3:a:netpbm:netpbm:10.18:*:*:*:*:*:*:*
    cpe:2.3:a:netpbm:netpbm:10.18:*:*:*:*:*:*:*
  • cpe:2.3:a:netpbm:netpbm:10.19:*:*:*:*:*:*:*
    cpe:2.3:a:netpbm:netpbm:10.19:*:*:*:*:*:*:*
  • cpe:2.3:a:netpbm:netpbm:10.20:*:*:*:*:*:*:*
    cpe:2.3:a:netpbm:netpbm:10.20:*:*:*:*:*:*:*
  • cpe:2.3:a:netpbm:netpbm:10.21:*:*:*:*:*:*:*
    cpe:2.3:a:netpbm:netpbm:10.21:*:*:*:*:*:*:*
  • cpe:2.3:a:netpbm:netpbm:10.22:*:*:*:*:*:*:*
    cpe:2.3:a:netpbm:netpbm:10.22:*:*:*:*:*:*:*
  • cpe:2.3:a:netpbm:netpbm:10.23:*:*:*:*:*:*:*
    cpe:2.3:a:netpbm:netpbm:10.23:*:*:*:*:*:*:*
  • cpe:2.3:a:netpbm:netpbm:10.24:*:*:*:*:*:*:*
    cpe:2.3:a:netpbm:netpbm:10.24:*:*:*:*:*:*:*
CVSS
Base: 7.5 (as of 03-10-2018 - 21:31)
Impact:
Exploitability:
CWE NVD-CWE-Other
CAPEC
Access
VectorComplexityAuthentication
NETWORK LOW NONE
Impact
ConfidentialityIntegrityAvailability
PARTIAL PARTIAL PARTIAL
cvss-vector via4 AV:N/AC:L/Au:N/C:P/I:P/A:P
oval via4
accepted 2013-04-29T04:02:06.560-04:00
class vulnerability
contributors
  • name Aharon Chernin
    organization SCAP.com, LLC
  • name Dragos Prisaca
    organization G2, Inc.
definition_extensions
  • comment The operating system installed on the system is Red Hat Enterprise Linux 4
    oval oval:org.mitre.oval:def:11831
  • comment CentOS Linux 4.x
    oval oval:org.mitre.oval:def:16636
  • comment Oracle Linux 4.x
    oval oval:org.mitre.oval:def:15990
description pnmtopng in netpbm before 10.25, when using the -trans option, uses uninitialized size and index variables when converting Portable Anymap (PNM) images to Portable Network Graphics (PNG), which might allow attackers to execute arbitrary code by modifying the stack.
family unix
id oval:org.mitre.oval:def:10135
status accepted
submitted 2010-07-09T03:56:16-04:00
title pnmtopng in netpbm before 10.25, when using the -trans option, uses uninitialized size and index variables when converting Portable Anymap (PNM) images to Portable Network Graphics (PNG), which might allow attackers to execute arbitrary code by modifying the stack.
version 29
redhat via4
advisories
rhsa
id RHSA-2005:793
rpms
  • netpbm-0:10.25-2.EL4.2
  • netpbm-debuginfo-0:10.25-2.EL4.2
  • netpbm-devel-0:10.25-2.EL4.2
  • netpbm-progs-0:10.25-2.EL4.2
refmap via4
bid 15128
debian DSA-878
gentoo GLSA-200510-18
misc https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=168278
sectrack 1015071
secunia
  • 17221
  • 17222
  • 17256
  • 17265
  • 17282
  • 17357
suse SUSE-SR:2005:024
ubuntu USN-210-1
vupen ADV-2005-2133
Last major update 03-10-2018 - 21:31
Published 18-10-2005 - 22:02
Last modified 03-10-2018 - 21:31
Back to Top