CVE-2005-2978
CVE-2005-2978
Esta página presenta datos de fuentes públicas de vulnerabilidades. Consulta el aviso original antes de actualizar.
pnmtopng in netpbm before 10.25, when using the -trans option, uses uninitialized size and index variables when converting Portable Anymap (PNM) images to Portable Network Graphics (PNG), which might allow attackers to execute arbitrary code by modifying the stack.
EPSS 4,9% · Corrección disponible
- Publicación
- Actualización
Pila tecnológica: system
Productos y versiones afectados
n/a
- Versiones
- n/a: Afectada
Sin corrección publicada
netpbm-free Debian:12
- Intervalos de versiones afectados
- ECOSYSTEM: < 2:10.0-10
Actualiza a 2:10.0-10
netpbm-free Debian:13
- Intervalos de versiones afectados
- ECOSYSTEM: < 2:10.0-10
Actualiza a 2:10.0-10
netpbm-free Debian:14
- Intervalos de versiones afectados
- ECOSYSTEM: < 2:10.0-10
Actualiza a 2:10.0-10
Fuentes originales
- https://usn.ubuntu.com/210-1/
- http://securitytracker.com/id?1015071
- http://www.vupen.com/english/advisories/2005/2133
- http://secunia.com/advisories/17282
- http://www.debian.org/security/2005/dsa-878
- http://secunia.com/advisories/17221
- http://secunia.com/advisories/17357
- http://www.redhat.com/support/errata/RHSA-2005-793.html
- http://secunia.com/advisories/17256
- https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=168278
- http://secunia.com/advisories/17265
- http://secunia.com/advisories/17222
- http://www.novell.com/linux/security/advisories/2005_24_sr.html
- http://www.gentoo.org/security/en/glsa/glsa-200510-18.xml
- http://www.securityfocus.com/bid/15128
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10135
- https://nvd.nist.gov/vuln/detail/CVE-2005-2978