NetPBM pamtofits buffer overflow

Off-by-one buffer overflow on input file parsing...

FreeBSD : netpbm -- buffer overflow in pnmtopng (ae9fb0d7-c4dc-11da-b2fb-000e0c2e438a)

Ubuntu reports : A buffer overflow was found in the 'pnmtopng' conversion program. By tricking an user or automated system to process a specially crafted PNM image with pnmtopng, this could be exploited to execute arbitrary code with the privileges of the user running pnmtopng. %NASLMINLEVEL 7030...

DSA-1021-1 netpbm-free - insecure program execution

Bulletin has no description...

Mandrake Linux Security Advisory : netpbm (MDKSA-2005:217)

Greg Roelofs discovered and fixed several buffer overflows in pnmtopng which is also included in netpbm, a collection of graphic conversion utilities, that can lead to the execution of arbitrary code via a specially crafted PNM file. Multiple buffer overflows in pnmtopng in netpbm 10.0 and earlie...

Ubuntu 4.10 / 5.04 / 5.10 : netpbm-free vulnerability (USN-210-1)

A buffer overflow was found in the 'pnmtopng' conversion program. By tricking an user or automated system to process a specially crafted PNM image with pnmtopng, this could be exploited to execute arbitrary code with the privileges of the user running pnmtopng. Note that Tenable Network Security...

Mandrake Linux Security Advisory : netpbm (MDKSA-2005:199)

Pnmtopng in netpbm 10.2X, when using the -trans option, uses uninitialized size and index variables when converting Portable Anymap PNM images to Portable Network Graphics PNG, which might allow attackers to execute arbitrary code by modifying the stack. Netpbm 9.2X is not affected by this...

Ubuntu 4.10 / 5.04 / 5.10 : netpbm-free vulnerabilities (USN-218-1)

Two buffer overflows were discovered in the 'pnmtopng' tool, which were triggered by processing an image with exactly 256 colors when using the -alpha option CVE-2005-3662 or by processing a text file with very long lines when using the -text option CVE-2005-3632. A remote attacker could exploit...

Ubuntu 4.10 / 5.04 : netpbm-free vulnerability (USN-164-1)

Max Vozeler discovered that the the 'pstopnm' conversion tool did not use the -dSAFER option when calling ghostscript. This option prohibits file operations and calling commands within PostScript code. This flaw could be exploited by an attacker to execute arbitrary code if he tricked an user or ...

netpbm security update

CentOS Errata and Security Advisory CESA-2005:843-01 Updated netpbm packages that fix two security issues are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The netpbm package contains a library of functions that support program...

netpbm security update

CentOS Errata and Security Advisory CESA-2005:843 Updated netpbm packages that fix two security issues are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The netpbm package contains a library of functions that support programs f...

security flaw

Multiple buffer overflows in pnmtopng in netpbm 10.0 and earlier allow attackers to execute arbitrary code via a crafted PNM file...

Moderate: Red Hat Security Advisory: netpbm security update

Updated netpbm packages that fix two security issues are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The netpbm package contains a library of functions that support programs for handling various graphics file formats. A stack...

CVE-2005-3632

Multiple buffer overflows in pnmtopng in netpbm 10.0 and earlier allow attackers to execute arbitrary code via a crafted PNM file...

CVE-2005-3632

Multiple buffer overflows in pnmtopng in netpbm 10.0 and earlier allow attackers to execute arbitrary code via a crafted PNM file...

DEBIAN-CVE-2005-3632

Multiple buffer overflows in pnmtopng in netpbm 10.0 and earlier allow attackers to execute arbitrary code via a crafted PNM file...

CVE-2005-3632

Multiple buffer overflows in pnmtopng in netpbm 10.0 and earlier allow attackers to execute arbitrary code via a crafted PNM file...

CVE-2005-3632

CVE-2005-3632 is substantiated by multiple sources in the connected documents: netpbm pnmtopng contains buffer overflow issues (RGBA-palette handling and -text/-alpha paths) that can allow arbitrary code execution via a crafted PNM file. The vulnerability is documented across Debian DSA-904-1, Re...

CVE-2005-3632

Multiple buffer overflows in pnmtopng in netpbm 10.0 and earlier allow attackers to execute arbitrary code via a crafted PNM file...

[SECURITY] [DSA 904-1] New netpbm packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 904-1 [email protected] http://www.debian.org/security/ Martin Schulze November 21st, 2005 http://www.debian.org/security/faq -...

[SECURITY] [DSA 904-1] New netpbm packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 904-1 [email protected] http://www.debian.org/security/ Martin Schulze November 21st, 2005 http://www.debian.org/security/faq -...