RedhatCVELIST:CVE-2005-2978CVE-2005-2978
pnmtopng in netpbm before 10.25, when using the -trans option, uses uninitialized size and index variables when converting Portable Anymap (PNM) images to Portable Network Graphics (PNG), which might allow attackers to execute arbitrary code by modifying the stack.
References
secunia.com/advisories/17221
secunia.com/advisories/17222
secunia.com/advisories/17256
secunia.com/advisories/17265
secunia.com/advisories/17282
secunia.com/advisories/17357
securitytracker.com/id?1015071
www.debian.org/security/2005/dsa-878
www.gentoo.org/security/en/glsa/glsa-200510-18.xml
www.novell.com/linux/security/advisories/2005_24_sr.html
www.redhat.com/support/errata/RHSA-2005-793.html
www.securityfocus.com/bid/15128
www.vupen.com/english/advisories/2005/2133
bugzilla.redhat.com/bugzilla/show_bug.cgi?id=168278
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10135
usn.ubuntu.com/210-1/
Related
