Lucene search
+L

5 matches found

Veracode
Veracode
•added 2019/01/15 8:50 a.m.•37 views

Remote Code Execution (RCE)

netpbm is vulnerable to remote code execution RCE attacks. The vulnerability exists through a stack-based buffer overflow flaw where an attacker could create a malicious XPM file that would cause xpmtoppm to crash or, potentially, execute arbitrary code with the privileges of the user running...

7.5CVSS7.7AI score0.04188EPSS
SaveExploits0References18Affected Software1
Oracle linux
Oracle linux
•added 2011/12/12 12:00 a.m.•50 views

netpbm security update

10.35.58-8.el5.3 - Actually apply the patch for - CVE-2009-4274 760849 10.35.58-8.el5.2 - fix xpmtoppm overfow - CVE-2009-4274 760849 10.35.58-8.el5.1 - fix libjasper heap buffer overflow CVE-2011-4516 CVE-2011-4517 760849...

7.5CVSS2.2AI score0.10487EPSS
SaveExploits0
OpenVAS
OpenVAS
•added 2010/02/17 12:00 a.m.•28 views

NetPBM 'xpmtoppm' Converter Buffer Overflow Vulnerability

This host is installed with NetPBM and is prone to Buffer Overflow vulnerability. OpenVAS Vulnerability Test $Id: gbnetpbmxpmtoppmbofvuln.nasl 5323 2017-02-17 08:49:23Z teissa $ NetPBM 'xpmtoppm' Converter Buffer Overflow Vulnerability Authors: Antu Sanadi Copyright: Copyright c 2010 Greenbone...

7.5CVSS0.3AI score0.04188EPSS
SaveExploits0References3
OpenVAS
OpenVAS
•added 2010/02/17 12:00 a.m.•20 views

NetPBM 'xpmtoppm' Converter Buffer Overflow Vulnerability

NetPBM is prone to a buffer overflow vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS6.6AI score0.04188EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2010/02/12 12:00 a.m.•5 views

CVE-2009-4274: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in converter/ppm/xpmtoppm.c in netpbm before 10.47.07 allows context-dependent attackers to cause a denial of service application crash or possibly execute arbitrary code via an XPM image file that contains a crafted header field associated with a large color index val...

7.5CVSS6.5AI score0.04188EPSS
SaveExploits0References2
Rows per page
Query Builder