Stack-based Buffer Overflow in Netpbm Affects Multiple Versions
CVE-2009-4274

Currently unrated

Key Information:

Vendor: Netpbm
Status: Netpbm
Vendor: CVE Published:; 12 February 2010

What is CVE-2009-4274?

A stack-based buffer overflow vulnerability exists in the Netpbm library due to improper validation of XPM image files. Attackers can exploit this flaw by crafting a malicious XPM image that contains a specially designed header with an excessively large color index value. This can lead to unintended application crashes, resulting in denial of service, or potentially allow attackers to execute arbitrary code on the affected system.

References

http://www.redhat.com/support/errata/RHSA-2011-1811.html

vendor-advisoryx_refsource_REDHAT

http://netpbm.svn.sourceforge.net/viewvc/netpbm/stable/co...

x_refsource_CONFIRM

http://www.vupen.com/english/advisories/2010/0358

vdb-entryx_refsource_VUPEN

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Feb 12, 2010
Vulnerability Reserved
Dec 10, 2009

CVE-2009-4274 Data

JSON