CVE-2005-2978
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7.2 High
AI Score
Confidence
Low
0.025 Low
EPSS
Percentile
90.3%
pnmtopng in netpbm before 10.25, when using the -trans option, uses uninitialized size and index variables when converting Portable Anymap (PNM) images to Portable Network Graphics (PNG), which might allow attackers to execute arbitrary code by modifying the stack.
Affected configurations
References
secunia.com/advisories/17221
secunia.com/advisories/17222
secunia.com/advisories/17256
secunia.com/advisories/17265
secunia.com/advisories/17282
secunia.com/advisories/17357
securitytracker.com/id?1015071
www.debian.org/security/2005/dsa-878
www.gentoo.org/security/en/glsa/glsa-200510-18.xml
www.novell.com/linux/security/advisories/2005_24_sr.html
www.redhat.com/support/errata/RHSA-2005-793.html
www.securityfocus.com/bid/15128
www.vupen.com/english/advisories/2005/2133
bugzilla.redhat.com/bugzilla/show_bug.cgi?id=168278
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10135
usn.ubuntu.com/210-1/
Related
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7.2 High
AI Score
Confidence
Low
0.025 Low
EPSS
Percentile
90.3%