507 matches found
[SA16184] netpbm Arbitrary Postscript Code Execution Vulnerability
---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...
[UNIX] Buffer Overflow in GOCR
The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...
CVE-2005-1141
GOCR 0.40 is affected by an Integer overflow in the readpgm function of pnm.c when using the netpbm library, allowing remote attackers to potentially execute arbitrary code via a specially crafted PNM file with large width/height, resulting in a heap-based buffer overflow. Affected component: GOC...
CVE-2005-1141
Integer overflow in the readpgm function in pnm.c for GOCR 0.40, when using the netpbm library, allows remote attackers to execute arbitrary code via a PNM file with large width and height values, which leads to a heap-based buffer overflow...
DEBIAN-CVE-2005-1141
Integer overflow in the readpgm function in pnm.c for GOCR 0.40, when using the netpbm library, allows remote attackers to execute arbitrary code via a PNM file with large width and height values, which leads to a heap-based buffer overflow...
CVE-2005-1141
Integer overflow in the readpgm function in pnm.c for GOCR 0.40, when using the netpbm library, allows remote attackers to execute arbitrary code via a PNM file with large width and height values, which leads to a heap-based buffer overflow...
Netpbm: Multiple temporary file issues
Background Netpbm is a toolkit containing more than 200 separate utilities for manipulation and conversion of graphic images. Description Utilities contained in the Netpbm package prior to the 9.25 version contain defects in temporary file handling. They create temporary files with predictable...
GLSA-200410-02 : Netpbm: Multiple temporary file issues
The remote host is affected by the vulnerability described in GLSA-200410-02 Netpbm: Multiple temporary file issues Utilities contained in the Netpbm package prior to the 9.25 version contain defects in temporary file handling. They create temporary files with predictable names without checking...
Debian DSA-263-1 : netpbm-free - math overflow errors
Al Viro and Alan Cox discovered several maths overflow errors in NetPBM, a set of graphics conversion tools. These programs are not installed setuid root but are often installed to prepare data for processing. These vulnerabilities may allow remote attackers to cause a denial of service or execut...
Debian DSA-426-1 : netpbm-free - insecure temporary files
netpbm is a graphics conversion toolkit made up of a large number of single-purpose programs. Many of these programs were found to create temporary files in an insecure manner, which could allow a local attacker to overwrite files with the privileges of the user invoking a vulnerable netpbm tool...
CVE-2003-0924
CVE-2003-0924 concerns NetPBM immediately prior to version 10.0, where utilities create temporary files with predictable names, enabling a local attacker to overwrite files with the invoking user’s privileges. Public reports summarize effects across multiple distributions (Debian DSA-426, Red Hat...
CVE-2003-0924
netpbm 9.25 and earlier does not properly create temporary files, which allows local users to overwrite arbitrary files...
CVE-2003-0924
netpbm 9.25 and earlier does not properly create temporary files, which allows local users to overwrite arbitrary files...
Mandrake Linux Security Advisory : netpbm (MDKSA-2003:036)
Several math overflow errors were found in NetPBM by Al Viro and Alan Cox. While these programs are not installed suid root, they are often used to prepare data for processing. These errors may permit remote attackers to cause a denial of service or execute arbitrary code in any programs or scrip...
Mandrake Linux Security Advisory : netpbm (MDKSA-2004:011-1)
A number of temporary file bugs have been found in versions of NetPBM. These could allow a local user the ability to overwrite or create files as a different user who happens to run one of the the vulnerable utilities. Update : The patch applied made some calls to the mktemp utility with an...
Fedora Core 1 : netpbm-9.24-12.1.1 (2004-068)
This update of the netpbm package fixes some security holes found by the Debian group. An update to the latest version these packages provide is recommended to every user of the netpbm programs and tools. Note that Tenable Network Security has extracted the preceding description block directly fr...
RHEL 2.1 / 3 : netpbm (RHSA-2004:031)
Updated NetPBM packages are available that fix a number of temporary file vulnerabilities in the netpbm libraries. The netpbm package contains a library of functions that support programs for handling various graphics file formats, including .pbm portable bitmaps, .pgm portable graymaps, .pnm...
RHEL 2.1 : netpbm (RHSA-2003:061)
Updated NetPBM packages are available that fix a number of vulnerabilities in the netpbm libraries. The netpbm package contains a library of functions that support programs for handling various graphics file formats, including .pbm portable bitmaps, .pgm portable graymaps, .pnm portable anymaps,...
