CVE-2005-3632 — Improper Restriction of Operations within the Bounds of a Memory Buffer in Netpbm-free

8 documents7 sources
Severity
4.6MEDIUMNVD
EPSS
0.2%
top 52.18%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Debian Netpbm-freeNetpbm
Timeline
PublishedNov 21
Latest updateMay 1

Description

Multiple buffer overflows in pnmtopng in netpbm 10.0 and earlier allow attackers to execute arbitrary code via a crafted PNM file.

CVSS vector

AV:L/AC:L/C:P/I:P/A:PExploitability: 3.9 | Impact: 6.4

Affected Packages2 packages

▶debiandebian/netpbm-free< netpbm-free 2:10.0-10.1 (bookworm)
▶NVDnetpbm/netpbm7 versions+6

Patches

Patch: www.debian.org ↗Patch: www.debian.org ↗

🔴Vulnerability Details

2
GHSA
GHSA-x3c8-wqw8-h8mr: Multiple buffer overflows in pnmtopng in netpbm 10↗2022-05-01
▶
OSV
CVE-2005-3632: Multiple buffer overflows in pnmtopng in netpbm 10↗2005-11-21
▶

📋Vendor Advisories

3
Ubuntu
netpbm vulnerabilities↗2005-11-22
▶
Red Hat
security flaw↗2005-11-12
▶
Debian
CVE-2005-3632: netpbm-free - Multiple buffer overflows in pnmtopng in netpbm 10.0 and earlier allow attackers...↗2005
▶

💬Community

2
Bugzilla
CVE-2005-3632 security flaw↗2018-08-16
▶
Bugzilla
CVE-2005-3632 Netpbm buffer overflow↗2005-11-16
▶