Stack-based buffer overflow in converter/ppm/xpmtoppm.c in netpbm before 10.47.07 allows context-dependent attackers to cause a denial of service (application crash) or possibly execute arbitrary code via an XPM image file that contains a crafted header field associated with a large color index value.
CVSS Details
- CVSS 3.1 Base Score: 8.1
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade netpbmUpgrade netpbm-develUpgrade netpbm-progs | Dec 1, 2016 | Feb 12, 2010 |
| Debian | — | Upgrade netpbm-free | Jul 30, 2024 | Feb 12, 2010 |
| Gentoo Linux | — | Upgrade media-libs/netpbm. | Oct 30, 2017 | Feb 12, 2010 |
| Oracle_linux | — | Upgrade netpbm-progsUpgrade netpbm-develUpgrade netpbm | Oct 16, 2024 | Feb 12, 2010 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Feb 9, 2010 |
| Suse | — | Upgrade libnetpbm10Upgrade netpbmUpgrade libnetpbm10-x86Upgrade libnetpbm-devel-32bitUpgrade libnetpbm-develUpgrade libnetpbm10-32bit | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade netpbm | Nov 8, 2024 | Feb 12, 2010 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub