Your submission was sent successfully! Close

CVE-2009-4274

Published: 12 February 2010

Stack-based buffer overflow in converter/ppm/xpmtoppm.c in netpbm before 10.47.07 allows context-dependent attackers to cause a denial of service (application crash) or possibly execute arbitrary code via an XPM image file that contains a crafted header field associated with a large color index value.

Notes

AuthorNote
kees
stack protection in Edgy and later makes this a DoS only.
Priority

Low

Status

Package Release Status
netpbm-free
Launchpad, Ubuntu, Debian
dapper Ignored
(reached end-of-life)
hardy
Released (2:10.0-11.1ubuntu0.1)
intrepid
Released (2:10.0-12ubuntu0.8.10.1)
jaunty
Released (2:10.0-12ubuntu0.9.04.1)
karmic
Released (2:10.0-12ubuntu1.1)
lucid
Released (2:10.0-12.1ubuntu1)
upstream
Released (10.47.07)
Patches:
upstream: http://netpbm.svn.sourceforge.net/viewvc/netpbm/stable/converter/ppm/xpmtoppm.c?view=patch&r1=995&r2=1076&pathrev=1076