Oval Definition:oval:org.mitre.oval:def:18400
Revision Date:2014-06-23Version:5
Title:DSA-2026-1 netpbm-free - buffer overflow
Description:Marc Schoenefeld discovered a stack-based buffer overflow in the XPM reader implementation in netpbm-free, a suite of image manipulation utilities. An attacker could cause a denial of service (application crash) or possibly execute arbitrary code via an XPM image file that contains a crafted header field associated with a large color index value.
Family:unixClass:patch
Status:ACCEPTEDReference(s):CVE-2009-4274
DSA-2026-1
Platform(s):Debian GNU/Linux 5.0
Product(s):netpbm-free
Definition Synopsis
  • Debian GNU/Linux 5.0 is installed
  • AND netpbm-free DPKG is earlier than 2:10.0-12+lenny1
  • BACK