CVE-2005-2978

Published: Oct 18, 2005Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

pnmtopng in netpbm before 10.25, when using the -trans option, uses uninitialized size and index variables when converting Portable Anymap (PNM) images to Portable Network Graphics (PNG), which might allow attackers to execute arbitrary code by modifying the stack.

Affected (25)

Products: Netpbm: Netpbm

1 product

Configuration A

25 vulnerable

Vulnerable Software	Affected Versions
Netpbm Netpbm	Version 10.0
Netpbm Netpbm	Version 10.10
Netpbm Netpbm	Version 10.11
Netpbm Netpbm	Version 10.12
Netpbm Netpbm	Version 10.13
Netpbm Netpbm	Version 10.14
Netpbm Netpbm	Version 10.15
Netpbm Netpbm	Version 10.16
Netpbm Netpbm	Version 10.17
Netpbm Netpbm	Version 10.18
Netpbm Netpbm	Version 10.19
Netpbm Netpbm	Version 10.1
Netpbm Netpbm	Version 10.20
Netpbm Netpbm	Version 10.21
Netpbm Netpbm	Version 10.22
Netpbm Netpbm	Version 10.23
Netpbm Netpbm	Version 10.24
Netpbm Netpbm	Version 10.2
Netpbm Netpbm	Version 10.3
Netpbm Netpbm	Version 10.4
Netpbm Netpbm	Version 10.5
Netpbm Netpbm	Version 10.6
Netpbm Netpbm	Version 10.7
Netpbm Netpbm	Version 10.8
Netpbm Netpbm	Version 10.9

References (32)

http://secunia.com/advisories/17221

Source: secalert@redhat.com

http://secunia.com/advisories/17222

Source: secalert@redhat.com

http://secunia.com/advisories/17256

Source: secalert@redhat.com

http://secunia.com/advisories/17265

Source: secalert@redhat.com

http://secunia.com/advisories/17282

Source: secalert@redhat.com

http://secunia.com/advisories/17357

Source: secalert@redhat.com

http://securitytracker.com/id?1015071

Source: secalert@redhat.com

http://www.debian.org/security/2005/dsa-878

Source: secalert@redhat.com

http://www.gentoo.org/security/en/glsa/glsa-200510-18.xml

Source: secalert@redhat.com

http://www.novell.com/linux/security/advisories/2005_24_sr.html

Source: secalert@redhat.com

http://www.redhat.com/support/errata/RHSA-2005-793.html

Source: secalert@redhat.com

Vendor Advisory

http://www.securityfocus.com/bid/15128

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2005/2133

Source: secalert@redhat.com

https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=168278

Source: secalert@redhat.com

ExploitVendor Advisory

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10135

Source: secalert@redhat.com

https://usn.ubuntu.com/210-1/

Source: secalert@redhat.com

http://secunia.com/advisories/17221

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/17222

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/17256

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/17265

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/17282

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/17357

Source: af854a3a-2127-422b-91ae-364da2661108

http://securitytracker.com/id?1015071

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.debian.org/security/2005/dsa-878

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.gentoo.org/security/en/glsa/glsa-200510-18.xml

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.novell.com/linux/security/advisories/2005_24_sr.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.redhat.com/support/errata/RHSA-2005-793.html

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.securityfocus.com/bid/15128

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2005/2133

Source: af854a3a-2127-422b-91ae-364da2661108

https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=168278

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitVendor Advisory

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10135

Source: af854a3a-2127-422b-91ae-364da2661108

https://usn.ubuntu.com/210-1/

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.