Uninitialized Variable Vulnerability in Netpbm's pnmtopng Affects Multiple Linux Distributions
CVE-2005-2978

Currently unrated

Key Information:

Vendor: Netpbm
Status: Netpbm
Vendor: CVE Published:; 18 October 2005

What is CVE-2005-2978?

The pnmtopng utility, part of the Netpbm suite, suffers from a security flaw when handling Portable Anymap (PNM) images due to uninitialized size and index variables. This vulnerability allows attackers to potentially exploit the system by manipulating the stack during image conversion processes. It poses significant risks for systems running affected versions of Netpbm before 10.25, as it could lead to arbitrary code execution.

References

https://usn.ubuntu.com/210-1/

vendor-advisoryx_refsource_UBUNTU

http://securitytracker.com/id?1015071

vdb-entryx_refsource_SECTRACK

http://www.vupen.com/english/advisories/2005/2133

vdb-entryx_refsource_VUPEN

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Oct 18, 2005
Vulnerability Reserved
Sep 19, 2005

CVE-2005-2978 Data

JSON