Approved changes feed: RSS · Atom
cpe:2.3:a:netpbm:netpbm:10.4:*:*:*:*:*:*:*part: a version: 10.4 update: *
| Vendor | Netpbm (ce685323-4ac9-59e9-aefa-7c88711c5306) |
|---|---|
| Product | Netpbm (dfa2cb01-4e1e-5578-b448-9413380259e6) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from purl2cpe mapping
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/spakin/netpbm |
purl2cpe | 2026-06-01 10:11:12.049301 |
pkg:golang/github.com/spakin/netpbm |
purl2cpe | 2026-06-01 10:11:12.049302 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2009-4274 |
vulnerable | 2026-06-08 04:51:47.832931 |
Details available
Stack-based buffer overflow in converter/ppm/xpmtoppm.c in netpbm before 10.47.07 allows context-dependent attackers to cause a denial of service (application crash) or possibly execute arbitrary code via an XPM image file that contains a crafted header field associated with a large color index value.
Published: 2010-02-12T21:00:00.000Z
Updated: 2024-08-07T06:54:10.362Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2008-4799 |
vulnerable | 2026-06-08 04:50:48.275944 |
Details available
pamperspective in Netpbm before 10.35.48 does not properly calculate a window height, which allows context-dependent attackers to cause a denial of service (crash) via a crafted image file that triggers an out-of-bounds read.
Published: 2008-10-30T22:00:00.000Z
Updated: 2024-08-07T10:31:27.352Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2005-2978 |
vulnerable | 2026-06-08 04:48:31.048953 |
Details available
pnmtopng in netpbm before 10.25, when using the -trans option, uses uninitialized size and index variables when converting Portable Anymap (PNM) images to Portable Network Graphics (PNG), which might allow attackers to execute arbitrary code by modifying the stack.
Published: 2005-10-18T04:00:00.000Z
Updated: 2024-08-07T22:53:30.137Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.