Netpbm vulnerability

2010-04-2900:00:00

ubuntu.com

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

6.8 Medium

AI Score

Confidence

Low

0.021 Low

EPSS

Percentile

89.2%

JSON

Releases

Ubuntu 9.10
Ubuntu 9.04
Ubuntu 8.04

Packages

netpbm-free -

Details

Marc Schoenefeld discovered a buffer overflow in Netpbm when loading
certain images. If a user or automated system were tricked into opening a
specially crafted XPM image, a remote attacker could crash Netpbm. The
default compiler options for affected releases should reduce the
vulnerability to a denial of service.

OSVersionArchitecturePackageVersionFilename
Ubuntu9.10noarchnetpbm< 2:10.0-12ubuntu1.1UNKNOWN
Ubuntu9.10noarchlibnetpbm10< 2:10.0-12ubuntu1.1UNKNOWN
Ubuntu9.10noarchlibnetpbm10-dev< 2:10.0-12ubuntu1.1UNKNOWN
Ubuntu9.10noarchlibnetpbm9< 2:10.0-12ubuntu1.1UNKNOWN
Ubuntu9.10noarchlibnetpbm9-dev< 2:10.0-12ubuntu1.1UNKNOWN
Ubuntu9.04noarchnetpbm< 2:10.0-12ubuntu0.9.04.1UNKNOWN
Ubuntu9.04noarchlibnetpbm10< 2:10.0-12ubuntu0.9.04.1UNKNOWN
Ubuntu9.04noarchlibnetpbm10-dev< 2:10.0-12ubuntu0.9.04.1UNKNOWN
Ubuntu9.04noarchlibnetpbm9< 2:10.0-12ubuntu0.9.04.1UNKNOWN
Ubuntu9.04noarchlibnetpbm9-dev< 2:10.0-12ubuntu0.9.04.1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Ubuntu	9.10	noarch	netpbm	< 2:10.0-12ubuntu1.1	UNKNOWN
Ubuntu	9.10	noarch	libnetpbm10	< 2:10.0-12ubuntu1.1	UNKNOWN
Ubuntu	9.10	noarch	libnetpbm10-dev	< 2:10.0-12ubuntu1.1	UNKNOWN
Ubuntu	9.10	noarch	libnetpbm9	< 2:10.0-12ubuntu1.1	UNKNOWN
Ubuntu	9.10	noarch	libnetpbm9-dev	< 2:10.0-12ubuntu1.1	UNKNOWN
Ubuntu	9.04	noarch	netpbm	< 2:10.0-12ubuntu0.9.04.1	UNKNOWN
Ubuntu	9.04	noarch	libnetpbm10	< 2:10.0-12ubuntu0.9.04.1	UNKNOWN
Ubuntu	9.04	noarch	libnetpbm10-dev	< 2:10.0-12ubuntu0.9.04.1	UNKNOWN
Ubuntu	9.04	noarch	libnetpbm9	< 2:10.0-12ubuntu0.9.04.1	UNKNOWN
Ubuntu	9.04	noarch	libnetpbm9-dev	< 2:10.0-12ubuntu0.9.04.1	UNKNOWN