Buffer overflow in Netpbm

CVE-2009-4274

Stack-based buffer overflow in converter/ppm/xpmtoppm.c in netpbm before 10.47.07 allows context-dependent attackers to cause a denial of service (application crash) or possibly execute arbitrary code via an XPM image file that contains a crafted header field associated with a large color index value.

Vulnerability class: Buffer Overflow

EPSS: 0.042 (90.0th percentile) — read the EPSS interpretation.

Affected products

  • Netpbm — versions 10.35.17, 10.5, 10.35.05
  • N/a — versions n/a

Weakness classification (CWE)

References