Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
6.8
CVSSv2

CVE-2008-0554

Published: 08/02/2008 Updated: 29/09/2017
CVSS v2 Base Score: 6.8 | Impact Score: 6.4 | Exploitability Score: 8.6
VMScore: 605
Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Subscribe to Netpbm

Vulnerability Summary

Buffer overflow in the readImageData function in giftopnm.c in netpbm prior to 10.27 in netpbm prior to 10.27 allows remote user-assisted malicious users to cause a denial of service (crash) and possibly execute arbitrary code via a crafted GIF image, a similar issue to CVE-2006-4484.

Vulnerable Product Search on Vulmon Subscribe to Product

netpbm netpbm

Vendor Advisories

Ubuntu Security Notice: netpbm-free vulnerability
It was discovered that Netpbm could be made to overrun a buffer when loading certain images If a user were tricked into opening a specially crafted GIF image, remote attackers could cause a denial of service or execute arbitrary code with user privileges ...
Debian CVElist Bug Report Logs: CVE-2006-4484: buffer overflow in giftopnm
Debian Bug report logs - #464056 CVE-2006-4484: buffer overflow in giftopnm Package: netpbm; Maintainer for netpbm is Andreas Barth <aba@notsoarghorg>; Source for netpbm is src:netpbm-free (PTS, buildd, popcon) Reported by: Stefan Fritsch <sf@sfritschde> Date: Mon, 4 Feb 2008 22:15:01 UTC Severity: important Ta ...
Debian Security Advisories: DSA-1579-1 netpbm-free -- insufficient input sanitizing
A vulnerability was discovered in the GIF reader implementation in netpbm-free, a suite of image manipulation utilities Insufficient input data validation could allow a maliciously-crafted GIF file to overrun a stack buffer, potentially permitting the execution of arbitrary code For the stable distribution (etch), these problems have been fixed i ...

References

CWE-119https://issues.rpath.com/browse/RPL-2216http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=464056http://www.mandriva.com/security/advisories?name=MDVSA-2008:039http://www.securityfocus.com/bid/27682http://www.securitytracker.com/id?1019358http://www.redhat.com/support/errata/RHSA-2008-0131.htmlhttp://secunia.com/advisories/29079http://www.debian.org/security/2008/dsa-1579http://secunia.com/advisories/30280http://www.vupen.com/english/advisories/2008/0460http://secunia.com/advisories/32607http://ubuntu.com/usn/usn-665-1https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10975https://usn.ubuntu.com/665-1/https://nvd.nist.gov
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
encryptionCVE-2024-4331CVE-2024-26925arbitrary codeCVE-2006-4304CVE-2024-25458CVE-2024-27077reflected XSSCVE-2024-4059
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook