Buffer Overflow in NetPBM Affects Remote Code Execution and Denial of Service
CVE-2006-3145

Currently unrated

Key Information:

Vendor

Netpbm

Status
Netpbm
Vendor
CVE Published:
22 June 2006

What is CVE-2006-3145?

The vulnerability in NetPBM's pamtofits component, present in versions 10.30 to 10.33, allows attackers to exploit a buffer overflow condition during header assembly. This situation can lead to application crashes and poses a risk of arbitrary code execution due to the potential off-by-one error in the processing logic. Users of affected versions should consider upgrades or patches to mitigate these risks.

References

http://www.vupen.com/english/advisories/2006/2449
vdb-entryx_refsource_VUPEN
https://exchange.xforce.ibmcloud.com/vulnerabilities/27244
vdb-entryx_refsource_XF
http://secunia.com/advisories/20775
third-party-advisoryx_refsource_SECUNIA

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.