CVE-2005-2978
CVE-2005-2978
This page contains facts from public vulnerability sources. Check the original advisory before updating.
pnmtopng in netpbm before 10.25, when using the -trans option, uses uninitialized size and index variables when converting Portable Anymap (PNM) images to Portable Network Graphics (PNG), which might allow attackers to execute arbitrary code by modifying the stack.
EPSS 4.9% · Fix available
- Published
- Updated
Stack: system
Affected products and versions
n/a
- Versions
- n/a: Affected
No fix published
netpbm-free Debian:12
- Affected ranges
- ECOSYSTEM: < 2:10.0-10
Update to 2:10.0-10
netpbm-free Debian:13
- Affected ranges
- ECOSYSTEM: < 2:10.0-10
Update to 2:10.0-10
netpbm-free Debian:14
- Affected ranges
- ECOSYSTEM: < 2:10.0-10
Update to 2:10.0-10
Original sources
- https://usn.ubuntu.com/210-1/
- http://securitytracker.com/id?1015071
- http://www.vupen.com/english/advisories/2005/2133
- http://secunia.com/advisories/17282
- http://www.debian.org/security/2005/dsa-878
- http://secunia.com/advisories/17221
- http://secunia.com/advisories/17357
- http://www.redhat.com/support/errata/RHSA-2005-793.html
- http://secunia.com/advisories/17256
- https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=168278
- http://secunia.com/advisories/17265
- http://secunia.com/advisories/17222
- http://www.novell.com/linux/security/advisories/2005_24_sr.html
- http://www.gentoo.org/security/en/glsa/glsa-200510-18.xml
- http://www.securityfocus.com/bid/15128
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10135
- https://nvd.nist.gov/vuln/detail/CVE-2005-2978