Executive Summary
| Informations | |||
|---|---|---|---|
| Name | CVE-2005-2978 | First vendor Publication | 2005-10-18 |
| Vendor | Cve | Last vendor Modification | 2018-10-03 |
Security-Database Scoring CVSS v3
| Cvss vector : N/A | |||
|---|---|---|---|
| Overall CVSS Score | NA | ||
| Base Score | NA | Environmental Score | NA |
| impact SubScore | NA | Temporal Score | NA |
| Exploitabality Sub Score | NA | ||
| Calculate full CVSS 3.0 Vectors scores | |||
Security-Database Scoring CVSS v2
| Cvss vector : (AV:N/AC:L/Au:N/C:P/I:P/A:P) | |||
|---|---|---|---|
| Cvss Base Score | 7.5 | Attack Range | Network |
| Cvss Impact Score | 6.4 | Attack Complexity | Low |
| Cvss Expoit Score | 10 | Authentication | None Required |
| Calculate full CVSS 2.0 Vectors scores | |||
Detail
| pnmtopng in netpbm before 10.25, when using the -trans option, uses uninitialized size and index variables when converting Portable Anymap (PNM) images to Portable Network Graphics (PNG), which might allow attackers to execute arbitrary code by modifying the stack. |
Original Source
| Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2978 |
CWE : Common Weakness Enumeration
| % | Id | Name |
|---|
OVAL Definitions
| Definition Id: oval:org.mitre.oval:def:10135 | |||
| Oval ID: | oval:org.mitre.oval:def:10135 | ||
| Title: | pnmtopng in netpbm before 10.25, when using the -trans option, uses uninitialized size and index variables when converting Portable Anymap (PNM) images to Portable Network Graphics (PNG), which might allow attackers to execute arbitrary code by modifying the stack. | ||
| Description: | pnmtopng in netpbm before 10.25, when using the -trans option, uses uninitialized size and index variables when converting Portable Anymap (PNM) images to Portable Network Graphics (PNG), which might allow attackers to execute arbitrary code by modifying the stack. | ||
| Family: | unix | Class: | vulnerability |
| Reference(s): | CVE-2005-2978 | Version: | 5 |
| Platform(s): | Red Hat Enterprise Linux 4 CentOS Linux 4 Oracle Linux 4 | Product(s): | |
| Definition Synopsis: | |||
| |||
CPE : Common Platform Enumeration
OpenVAS Exploits
| Date | Description |
|---|---|
| 2009-10-10 | Name : SLES9: Security update for netpbm File : nvt/sles9p5010678.nasl |
| 2008-09-24 | Name : Gentoo Security Advisory GLSA 200510-18 (Netpbm) File : nvt/glsa_200510_18.nasl |
| 2008-09-04 | Name : FreeBSD Ports: netpbm File : nvt/freebsd_netpbm.nasl |
| 2008-01-17 | Name : Debian Security Advisory DSA 878-1 (netpbm-free) File : nvt/deb_878_1.nasl |
Open Source Vulnerability Database (OSVDB)
| Id | Description |
|---|---|
| 20068 | Netpbm pnmtopng closestColorInPalette() Function Arbitrary Code Execution |
Nessus® Vulnerability Scanner
| Date | Description |
|---|---|
| 2006-10-14 | Name : The remote Debian host is missing a security-related update. File : debian_DSA-878.nasl - Type : ACT_GATHER_INFO |
| 2006-07-05 | Name : The remote CentOS host is missing one or more security updates. File : centos_RHSA-2005-793.nasl - Type : ACT_GATHER_INFO |
| 2006-05-13 | Name : The remote FreeBSD host is missing a security-related update. File : freebsd_pkg_ae9fb0d7c4dc11dab2fb000e0c2e438a.nasl - Type : ACT_GATHER_INFO |
| 2006-01-15 | Name : The remote Mandrake Linux host is missing one or more security updates. File : mandrake_MDKSA-2005-199.nasl - Type : ACT_GATHER_INFO |
| 2006-01-15 | Name : The remote Ubuntu host is missing one or more security-related patches. File : ubuntu_USN-210-1.nasl - Type : ACT_GATHER_INFO |
| 2005-10-24 | Name : The remote Gentoo host is missing one or more security-related patches. File : gentoo_GLSA-200510-18.nasl - Type : ACT_GATHER_INFO |
| 2005-10-19 | Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2005-793.nasl - Type : ACT_GATHER_INFO |
Sources (Detail)
Alert History
| Date | Informations |
|---|---|
| 2021-05-04 12:03:11 |
|
| 2021-04-22 01:03:27 |
|
| 2020-05-23 00:16:50 |
|
| 2018-10-04 00:19:25 |
|
| 2017-10-11 09:23:34 |
|
| 2016-04-26 13:48:54 |
|
| 2014-02-17 10:32:56 |
|
| 2013-05-11 11:31:56 |
|
