CVEvulnerability

CVE-2005-2978

7.5 HIGH Published 2005-10-18 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2005-10-18
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P

Description

pnmtopng in netpbm before 10.25, when using the -trans option, uses uninitialized size and index variables when converting Portable Anymap (PNM) images to Portable Network Graphics (PNG), which might allow attackers to execute arbitrary code by modifying the stack.

Affected configurations

• netpbm netpbm 10.0 • netpbm netpbm 10.1 • netpbm netpbm 10.2 • netpbm netpbm 10.3 • netpbm netpbm 10.4 • netpbm netpbm 10.5 • netpbm netpbm 10.6 • netpbm netpbm 10.7 • netpbm netpbm 10.8 • netpbm netpbm 10.9 • netpbm netpbm 10.10 • netpbm netpbm 10.11 • netpbm netpbm 10.12 • netpbm netpbm 10.13 • netpbm netpbm 10.14 • netpbm netpbm 10.15 • netpbm netpbm 10.16 • netpbm netpbm 10.17 • netpbm netpbm 10.18 • netpbm netpbm 10.19 • netpbm netpbm 10.20 • netpbm netpbm 10.21 • netpbm netpbm 10.22 • netpbm netpbm 10.23 • netpbm netpbm 10.24

Related

Referenced by CWE · observed example (1)

  • CWE-456 Missing Initialization of a Variable weakness

References