Lucene search

[email protected]CVE-2008-4799

HistoryOct 31, 2008 - 12:00 a.m.

CVE-2008-4799

2008-10-3100:00:00

CWE-189

[email protected]

web.nvd.nist.gov

cve-2008-4799

netpbm

denial of service

out-of-bounds read

security vulnerability

6 Medium

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

0.002 Low

EPSS

Percentile

60.8%

JSON

pamperspective in Netpbm before 10.35.48 does not properly calculate a window height, which allows context-dependent attackers to cause a denial of service (crash) via a crafted image file that triggers an out-of-bounds read.

Affected configurations

NVD

Node

netpbmnetpbmRange≤10.35.47

netpbmnetpbmMatch8.1

netpbmnetpbmMatch8.2

netpbmnetpbmMatch8.3

netpbmnetpbmMatch8.4

netpbmnetpbmMatch9.0

netpbmnetpbmMatch9.1

netpbmnetpbmMatch9.2

netpbmnetpbmMatch9.3

netpbmnetpbmMatch9.4

netpbmnetpbmMatch9.5

netpbmnetpbmMatch9.6

netpbmnetpbmMatch9.7

netpbmnetpbmMatch9.8

netpbmnetpbmMatch9.9

netpbmnetpbmMatch9.10

netpbmnetpbmMatch9.11

netpbmnetpbmMatch9.12

netpbmnetpbmMatch9.13

netpbmnetpbmMatch9.14

netpbmnetpbmMatch9.15

netpbmnetpbmMatch9.16

netpbmnetpbmMatch9.17

netpbmnetpbmMatch9.18

netpbmnetpbmMatch9.19

netpbmnetpbmMatch9.20

netpbmnetpbmMatch9.21

netpbmnetpbmMatch9.22

netpbmnetpbmMatch9.23

netpbmnetpbmMatch9.24

netpbmnetpbmMatch9.25

netpbmnetpbmMatch10.0

netpbmnetpbmMatch10.1

netpbmnetpbmMatch10.2

netpbmnetpbmMatch10.3

netpbmnetpbmMatch10.4

netpbmnetpbmMatch10.5

netpbmnetpbmMatch10.6

netpbmnetpbmMatch10.7

netpbmnetpbmMatch10.8

netpbmnetpbmMatch10.9

netpbmnetpbmMatch10.10

netpbmnetpbmMatch10.12

netpbmnetpbmMatch10.13

netpbmnetpbmMatch10.14

netpbmnetpbmMatch10.15

netpbmnetpbmMatch10.16

netpbmnetpbmMatch10.17

netpbmnetpbmMatch10.18

netpbmnetpbmMatch10.19

netpbmnetpbmMatch10.20

netpbmnetpbmMatch10.21

netpbmnetpbmMatch10.22

netpbmnetpbmMatch10.23

netpbmnetpbmMatch10.24

netpbmnetpbmMatch10.25

netpbmnetpbmMatch10.26

netpbmnetpbmMatch10.27

netpbmnetpbmMatch10.28

netpbmnetpbmMatch10.29

netpbmnetpbmMatch10.30

netpbmnetpbmMatch10.31

netpbmnetpbmMatch10.32

netpbmnetpbmMatch10.33

netpbmnetpbmMatch10.34

netpbmnetpbmMatch10.35.00

netpbmnetpbmMatch10.35.01

netpbmnetpbmMatch10.35.02

netpbmnetpbmMatch10.35.03

netpbmnetpbmMatch10.35.04

netpbmnetpbmMatch10.35.05

netpbmnetpbmMatch10.35.06

netpbmnetpbmMatch10.35.07

netpbmnetpbmMatch10.35.08

netpbmnetpbmMatch10.35.09

netpbmnetpbmMatch10.35.10

netpbmnetpbmMatch10.35.11

netpbmnetpbmMatch10.35.12

netpbmnetpbmMatch10.35.13

netpbmnetpbmMatch10.35.14

netpbmnetpbmMatch10.35.15

netpbmnetpbmMatch10.35.16

netpbmnetpbmMatch10.35.17

netpbmnetpbmMatch10.35.18

netpbmnetpbmMatch10.35.19

netpbmnetpbmMatch10.35.20

netpbmnetpbmMatch10.35.21

netpbmnetpbmMatch10.35.22

netpbmnetpbmMatch10.35.23

netpbmnetpbmMatch10.35.24

netpbmnetpbmMatch10.35.25

netpbmnetpbmMatch10.35.26

netpbmnetpbmMatch10.35.27

netpbmnetpbmMatch10.35.28

netpbmnetpbmMatch10.35.29

netpbmnetpbmMatch10.35.30

netpbmnetpbmMatch10.35.31

netpbmnetpbmMatch10.35.32

netpbmnetpbmMatch10.35.33

netpbmnetpbmMatch10.35.34

netpbmnetpbmMatch10.35.35

netpbmnetpbmMatch10.35.36

netpbmnetpbmMatch10.35.37

netpbmnetpbmMatch10.35.38

netpbmnetpbmMatch10.35.39

netpbmnetpbmMatch10.35.40

netpbmnetpbmMatch10.35.41

netpbmnetpbmMatch10.35.42

netpbmnetpbmMatch10.35.43

netpbmnetpbmMatch10.35.44

netpbmnetpbmMatch10.35.45

netpbmnetpbmMatch10.35.46

CPENameOperatorVersion
netpbm:netpbmnetpbmle10.35.47
netpbm:netpbmnetpbmeq8.1
netpbm:netpbmnetpbmeq8.2
netpbm:netpbmnetpbmeq8.3
netpbm:netpbmnetpbmeq8.4
netpbm:netpbmnetpbmeq9.0
netpbm:netpbmnetpbmeq9.1
netpbm:netpbmnetpbmeq9.2
netpbm:netpbmnetpbmeq9.3
netpbm:netpbmnetpbmeq9.4

CPE	Name	Operator	Version
netpbm:netpbm	netpbm	le	10.35.47
netpbm:netpbm	netpbm	eq	8.1
netpbm:netpbm	netpbm	eq	8.2
netpbm:netpbm	netpbm	eq	8.3
netpbm:netpbm	netpbm	eq	8.4
netpbm:netpbm	netpbm	eq	9.0
netpbm:netpbm	netpbm	eq	9.1
netpbm:netpbm	netpbm	eq	9.2
netpbm:netpbm	netpbm	eq	9.3
netpbm:netpbm	netpbm	eq	9.4