Memory Allocation Flaw in Netpbm by Red Hat
CVE-2017-2587

3.3LOW

Key Information:

Vendor

Netpbm

Status
Netpbm
Vendor
CVE Published:
27 July 2018

What is CVE-2017-2587?

A memory allocation flaw was identified in Netpbm prior to version 10.61. This vulnerability can be exploited through a specially crafted SVG file, potentially causing the application to terminate unexpectedly. Proper scrutiny and handling of file inputs in the application are essential to mitigate potential exploits stemming from this vulnerability.

Affected Version(s)

netpbm 10.61

References

http://www.securityfocus.com/bid/96702
vdb-entryx_refsource_BID
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2587
x_refsource_CONFIRM

CVSS V3.1

Score:
3.3
Severity:
LOW
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.