pamperspective in Netpbm before 10.35.48 does not properly calculate a window height…
Priority LOW 23CWE-189Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- — Not recorded in CVSS 2.0
- Attack complexity
- Medium
- Impact type
- Denial of service
- Confidentiality · integrity · availability
- None · None · Partial
- Fix status
- No fix listed
Attack profile from CVSS 2.0 · NVD. Fix status from CNA. Impact type from CWE-189 and the CVSS impact.
Summary
pamperspective in Netpbm before 10.35.48 does not properly calculate a window height, which allows context-dependent attackers to cause a denial of service (crash) via a crafted image file that triggers an out-of-bounds read.
Why it matters now
EPSS 0.01658 76th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | — | all versions | — | No fix listed | CNA |
- — Vendor— Affected all versions Fixed in — No fix listed CNA
CPE configurations NVD · 112
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:netpbm:netpbm:*:*:*:*:*:*:*:* | up to 10.35.47 | Vulnerable | Netpbm |
| cpe:2.3:a:netpbm:netpbm:8.1:*:*:*:*:*:*:* | 8.1 | Vulnerable | Netpbm |
| cpe:2.3:a:netpbm:netpbm:8.2:*:*:*:*:*:*:* | 8.2 | Vulnerable | Netpbm |
| cpe:2.3:a:netpbm:netpbm:8.3:*:*:*:*:*:*:* | 8.3 | Vulnerable | Netpbm |
| cpe:2.3:a:netpbm:netpbm:8.4:*:*:*:*:*:*:* | 8.4 | Vulnerable | Netpbm |
| cpe:2.3:a:netpbm:netpbm:9.0:*:*:*:*:*:*:* | 9.0 | Vulnerable | Netpbm |
| cpe:2.3:a:netpbm:netpbm:9.1:*:*:*:*:*:*:* | 9.1 | Vulnerable | Netpbm |
| cpe:2.3:a:netpbm:netpbm:9.2:*:*:*:*:*:*:* | 9.2 | Vulnerable | Netpbm |
| cpe:2.3:a:netpbm:netpbm:9.3:*:*:*:*:*:*:* | 9.3 | Vulnerable | Netpbm |
| cpe:2.3:a:netpbm:netpbm:9.4:*:*:*:*:*:*:* | 9.4 | Vulnerable | Netpbm |
- cpe:2.3:a:netpbm:netpbm:*:*:*:*:*:*:*:* Versions up to 10.35.47 Vulnerable ·Netpbm
- cpe:2.3:a:netpbm:netpbm:8.1:*:*:*:*:*:*:* Versions 8.1 Vulnerable ·Netpbm
- cpe:2.3:a:netpbm:netpbm:8.2:*:*:*:*:*:*:* Versions 8.2 Vulnerable ·Netpbm
- cpe:2.3:a:netpbm:netpbm:8.3:*:*:*:*:*:*:* Versions 8.3 Vulnerable ·Netpbm
- cpe:2.3:a:netpbm:netpbm:8.4:*:*:*:*:*:*:* Versions 8.4 Vulnerable ·Netpbm
- cpe:2.3:a:netpbm:netpbm:9.0:*:*:*:*:*:*:* Versions 9.0 Vulnerable ·Netpbm
- cpe:2.3:a:netpbm:netpbm:9.1:*:*:*:*:*:*:* Versions 9.1 Vulnerable ·Netpbm
- cpe:2.3:a:netpbm:netpbm:9.2:*:*:*:*:*:*:* Versions 9.2 Vulnerable ·Netpbm
- cpe:2.3:a:netpbm:netpbm:9.3:*:*:*:*:*:*:* Versions 9.3 Vulnerable ·Netpbm
- cpe:2.3:a:netpbm:netpbm:9.4:*:*:*:*:*:*:* Versions 9.4 Vulnerable ·Netpbm
Show 102 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:netpbm:netpbm:9.5:*:*:*:*:*:*:* | 9.5 | Vulnerable | Netpbm |
| cpe:2.3:a:netpbm:netpbm:9.6:*:*:*:*:*:*:* | 9.6 | Vulnerable | Netpbm |
| cpe:2.3:a:netpbm:netpbm:9.7:*:*:*:*:*:*:* | 9.7 | Vulnerable | Netpbm |
| cpe:2.3:a:netpbm:netpbm:9.8:*:*:*:*:*:*:* | 9.8 | Vulnerable | Netpbm |
| cpe:2.3:a:netpbm:netpbm:9.9:*:*:*:*:*:*:* | 9.9 | Vulnerable | Netpbm |
| cpe:2.3:a:netpbm:netpbm:9.10:*:*:*:*:*:*:* | 9.10 | Vulnerable | Netpbm |
| cpe:2.3:a:netpbm:netpbm:9.11:*:*:*:*:*:*:* | 9.11 | Vulnerable | Netpbm |
| cpe:2.3:a:netpbm:netpbm:9.12:*:*:*:*:*:*:* | 9.12 | Vulnerable | Netpbm |
| cpe:2.3:a:netpbm:netpbm:9.13:*:*:*:*:*:*:* | 9.13 | Vulnerable | Netpbm |
| cpe:2.3:a:netpbm:netpbm:9.14:*:*:*:*:*:*:* | 9.14 | Vulnerable | Netpbm |
| cpe:2.3:a:netpbm:netpbm:9.15:*:*:*:*:*:*:* | 9.15 | Vulnerable | Netpbm |
| cpe:2.3:a:netpbm:netpbm:9.16:*:*:*:*:*:*:* | 9.16 | Vulnerable | Netpbm |
| cpe:2.3:a:netpbm:netpbm:9.17:*:*:*:*:*:*:* | 9.17 | Vulnerable | Netpbm |
| cpe:2.3:a:netpbm:netpbm:9.18:*:*:*:*:*:*:* | 9.18 | Vulnerable | Netpbm |
| cpe:2.3:a:netpbm:netpbm:9.19:*:*:*:*:*:*:* | 9.19 | Vulnerable | Netpbm |
| cpe:2.3:a:netpbm:netpbm:9.20:*:*:*:*:*:*:* | 9.20 | Vulnerable | Netpbm |
| cpe:2.3:a:netpbm:netpbm:9.21:*:*:*:*:*:*:* | 9.21 | Vulnerable | Netpbm |
| cpe:2.3:a:netpbm:netpbm:9.22:*:*:*:*:*:*:* | 9.22 | Vulnerable | Netpbm |
| cpe:2.3:a:netpbm:netpbm:9.23:*:*:*:*:*:*:* | 9.23 | Vulnerable | Netpbm |
| cpe:2.3:a:netpbm:netpbm:9.24:*:*:*:*:*:*:* | 9.24 | Vulnerable | Netpbm |
| cpe:2.3:a:netpbm:netpbm:9.25:*:*:*:*:*:*:* | 9.25 | Vulnerable | Netpbm |
| cpe:2.3:a:netpbm:netpbm:10.0:*:*:*:*:*:*:* | 10.0 | Vulnerable | Netpbm |
| cpe:2.3:a:netpbm:netpbm:10.1:*:*:*:*:*:*:* | 10.1 | Vulnerable | Netpbm |
| cpe:2.3:a:netpbm:netpbm:10.2:*:*:*:*:*:*:* | 10.2 | Vulnerable | Netpbm |
| cpe:2.3:a:netpbm:netpbm:10.3:*:*:*:*:*:*:* | 10.3 | Vulnerable | Netpbm |
| cpe:2.3:a:netpbm:netpbm:10.4:*:*:*:*:*:*:* | 10.4 | Vulnerable | Netpbm |
| cpe:2.3:a:netpbm:netpbm:10.5:*:*:*:*:*:*:* | 10.5 | Vulnerable | Netpbm |
| cpe:2.3:a:netpbm:netpbm:10.6:*:*:*:*:*:*:* | 10.6 | Vulnerable | Netpbm |
| cpe:2.3:a:netpbm:netpbm:10.7:*:*:*:*:*:*:* | 10.7 | Vulnerable | Netpbm |
| cpe:2.3:a:netpbm:netpbm:10.8:*:*:*:*:*:*:* | 10.8 | Vulnerable | Netpbm |
| cpe:2.3:a:netpbm:netpbm:10.9:*:*:*:*:*:*:* | 10.9 | Vulnerable | Netpbm |
| cpe:2.3:a:netpbm:netpbm:10.10:*:*:*:*:*:*:* | 10.10 | Vulnerable | Netpbm |
| cpe:2.3:a:netpbm:netpbm:10.12:*:*:*:*:*:*:* | 10.12 | Vulnerable | Netpbm |
| cpe:2.3:a:netpbm:netpbm:10.13:*:*:*:*:*:*:* | 10.13 | Vulnerable | Netpbm |
| cpe:2.3:a:netpbm:netpbm:10.14:*:*:*:*:*:*:* | 10.14 | Vulnerable | Netpbm |
| cpe:2.3:a:netpbm:netpbm:10.15:*:*:*:*:*:*:* | 10.15 | Vulnerable | Netpbm |
| cpe:2.3:a:netpbm:netpbm:10.16:*:*:*:*:*:*:* | 10.16 | Vulnerable | Netpbm |
| cpe:2.3:a:netpbm:netpbm:10.17:*:*:*:*:*:*:* | 10.17 | Vulnerable | Netpbm |
| cpe:2.3:a:netpbm:netpbm:10.18:*:*:*:*:*:*:* | 10.18 | Vulnerable | Netpbm |
| cpe:2.3:a:netpbm:netpbm:10.19:*:*:*:*:*:*:* | 10.19 | Vulnerable | Netpbm |
| cpe:2.3:a:netpbm:netpbm:10.20:*:*:*:*:*:*:* | 10.20 | Vulnerable | Netpbm |
| cpe:2.3:a:netpbm:netpbm:10.21:*:*:*:*:*:*:* | 10.21 | Vulnerable | Netpbm |
| cpe:2.3:a:netpbm:netpbm:10.22:*:*:*:*:*:*:* | 10.22 | Vulnerable | Netpbm |
| cpe:2.3:a:netpbm:netpbm:10.23:*:*:*:*:*:*:* | 10.23 | Vulnerable | Netpbm |
| cpe:2.3:a:netpbm:netpbm:10.24:*:*:*:*:*:*:* | 10.24 | Vulnerable | Netpbm |
| cpe:2.3:a:netpbm:netpbm:10.25:*:*:*:*:*:*:* | 10.25 | Vulnerable | Netpbm |
| cpe:2.3:a:netpbm:netpbm:10.26:*:*:*:*:*:*:* | 10.26 | Vulnerable | Netpbm |
| cpe:2.3:a:netpbm:netpbm:10.27:*:*:*:*:*:*:* | 10.27 | Vulnerable | Netpbm |
| cpe:2.3:a:netpbm:netpbm:10.28:*:*:*:*:*:*:* | 10.28 | Vulnerable | Netpbm |
| cpe:2.3:a:netpbm:netpbm:10.29:*:*:*:*:*:*:* | 10.29 | Vulnerable | Netpbm |
| cpe:2.3:a:netpbm:netpbm:10.30:*:*:*:*:*:*:* | 10.30 | Vulnerable | Netpbm |
| cpe:2.3:a:netpbm:netpbm:10.31:*:*:*:*:*:*:* | 10.31 | Vulnerable | Netpbm |
| cpe:2.3:a:netpbm:netpbm:10.32:*:*:*:*:*:*:* | 10.32 | Vulnerable | Netpbm |
| cpe:2.3:a:netpbm:netpbm:10.33:*:*:*:*:*:*:* | 10.33 | Vulnerable | Netpbm |
| cpe:2.3:a:netpbm:netpbm:10.34:*:*:*:*:*:*:* | 10.34 | Vulnerable | Netpbm |
| cpe:2.3:a:netpbm:netpbm:10.35.00:*:*:*:*:*:*:* | 10.35.00 | Vulnerable | Netpbm |
| cpe:2.3:a:netpbm:netpbm:10.35.01:*:*:*:*:*:*:* | 10.35.01 | Vulnerable | Netpbm |
| cpe:2.3:a:netpbm:netpbm:10.35.02:*:*:*:*:*:*:* | 10.35.02 | Vulnerable | Netpbm |
| cpe:2.3:a:netpbm:netpbm:10.35.03:*:*:*:*:*:*:* | 10.35.03 | Vulnerable | Netpbm |
| cpe:2.3:a:netpbm:netpbm:10.35.04:*:*:*:*:*:*:* | 10.35.04 | Vulnerable | Netpbm |
| cpe:2.3:a:netpbm:netpbm:10.35.05:*:*:*:*:*:*:* | 10.35.05 | Vulnerable | Netpbm |
| cpe:2.3:a:netpbm:netpbm:10.35.06:*:*:*:*:*:*:* | 10.35.06 | Vulnerable | Netpbm |
| cpe:2.3:a:netpbm:netpbm:10.35.07:*:*:*:*:*:*:* | 10.35.07 | Vulnerable | Netpbm |
| cpe:2.3:a:netpbm:netpbm:10.35.08:*:*:*:*:*:*:* | 10.35.08 | Vulnerable | Netpbm |
| cpe:2.3:a:netpbm:netpbm:10.35.09:*:*:*:*:*:*:* | 10.35.09 | Vulnerable | Netpbm |
| cpe:2.3:a:netpbm:netpbm:10.35.10:*:*:*:*:*:*:* | 10.35.10 | Vulnerable | Netpbm |
| cpe:2.3:a:netpbm:netpbm:10.35.11:*:*:*:*:*:*:* | 10.35.11 | Vulnerable | Netpbm |
| cpe:2.3:a:netpbm:netpbm:10.35.12:*:*:*:*:*:*:* | 10.35.12 | Vulnerable | Netpbm |
| cpe:2.3:a:netpbm:netpbm:10.35.13:*:*:*:*:*:*:* | 10.35.13 | Vulnerable | Netpbm |
| cpe:2.3:a:netpbm:netpbm:10.35.14:*:*:*:*:*:*:* | 10.35.14 | Vulnerable | Netpbm |
| cpe:2.3:a:netpbm:netpbm:10.35.15:*:*:*:*:*:*:* | 10.35.15 | Vulnerable | Netpbm |
| cpe:2.3:a:netpbm:netpbm:10.35.16:*:*:*:*:*:*:* | 10.35.16 | Vulnerable | Netpbm |
| cpe:2.3:a:netpbm:netpbm:10.35.17:*:*:*:*:*:*:* | 10.35.17 | Vulnerable | Netpbm |
| cpe:2.3:a:netpbm:netpbm:10.35.18:*:*:*:*:*:*:* | 10.35.18 | Vulnerable | Netpbm |
| cpe:2.3:a:netpbm:netpbm:10.35.19:*:*:*:*:*:*:* | 10.35.19 | Vulnerable | Netpbm |
| cpe:2.3:a:netpbm:netpbm:10.35.20:*:*:*:*:*:*:* | 10.35.20 | Vulnerable | Netpbm |
| cpe:2.3:a:netpbm:netpbm:10.35.21:*:*:*:*:*:*:* | 10.35.21 | Vulnerable | Netpbm |
| cpe:2.3:a:netpbm:netpbm:10.35.22:*:*:*:*:*:*:* | 10.35.22 | Vulnerable | Netpbm |
| cpe:2.3:a:netpbm:netpbm:10.35.23:*:*:*:*:*:*:* | 10.35.23 | Vulnerable | Netpbm |
| cpe:2.3:a:netpbm:netpbm:10.35.24:*:*:*:*:*:*:* | 10.35.24 | Vulnerable | Netpbm |
| cpe:2.3:a:netpbm:netpbm:10.35.25:*:*:*:*:*:*:* | 10.35.25 | Vulnerable | Netpbm |
| cpe:2.3:a:netpbm:netpbm:10.35.26:*:*:*:*:*:*:* | 10.35.26 | Vulnerable | Netpbm |
| cpe:2.3:a:netpbm:netpbm:10.35.27:*:*:*:*:*:*:* | 10.35.27 | Vulnerable | Netpbm |
| cpe:2.3:a:netpbm:netpbm:10.35.28:*:*:*:*:*:*:* | 10.35.28 | Vulnerable | Netpbm |
| cpe:2.3:a:netpbm:netpbm:10.35.29:*:*:*:*:*:*:* | 10.35.29 | Vulnerable | Netpbm |
| cpe:2.3:a:netpbm:netpbm:10.35.30:*:*:*:*:*:*:* | 10.35.30 | Vulnerable | Netpbm |
| cpe:2.3:a:netpbm:netpbm:10.35.31:*:*:*:*:*:*:* | 10.35.31 | Vulnerable | Netpbm |
| cpe:2.3:a:netpbm:netpbm:10.35.32:*:*:*:*:*:*:* | 10.35.32 | Vulnerable | Netpbm |
| cpe:2.3:a:netpbm:netpbm:10.35.33:*:*:*:*:*:*:* | 10.35.33 | Vulnerable | Netpbm |
| cpe:2.3:a:netpbm:netpbm:10.35.34:*:*:*:*:*:*:* | 10.35.34 | Vulnerable | Netpbm |
| cpe:2.3:a:netpbm:netpbm:10.35.35:*:*:*:*:*:*:* | 10.35.35 | Vulnerable | Netpbm |
| cpe:2.3:a:netpbm:netpbm:10.35.36:*:*:*:*:*:*:* | 10.35.36 | Vulnerable | Netpbm |
| cpe:2.3:a:netpbm:netpbm:10.35.37:*:*:*:*:*:*:* | 10.35.37 | Vulnerable | Netpbm |
| cpe:2.3:a:netpbm:netpbm:10.35.38:*:*:*:*:*:*:* | 10.35.38 | Vulnerable | Netpbm |
| cpe:2.3:a:netpbm:netpbm:10.35.39:*:*:*:*:*:*:* | 10.35.39 | Vulnerable | Netpbm |
| cpe:2.3:a:netpbm:netpbm:10.35.40:*:*:*:*:*:*:* | 10.35.40 | Vulnerable | Netpbm |
| cpe:2.3:a:netpbm:netpbm:10.35.41:*:*:*:*:*:*:* | 10.35.41 | Vulnerable | Netpbm |
| cpe:2.3:a:netpbm:netpbm:10.35.42:*:*:*:*:*:*:* | 10.35.42 | Vulnerable | Netpbm |
| cpe:2.3:a:netpbm:netpbm:10.35.43:*:*:*:*:*:*:* | 10.35.43 | Vulnerable | Netpbm |
| cpe:2.3:a:netpbm:netpbm:10.35.44:*:*:*:*:*:*:* | 10.35.44 | Vulnerable | Netpbm |
| cpe:2.3:a:netpbm:netpbm:10.35.45:*:*:*:*:*:*:* | 10.35.45 | Vulnerable | Netpbm |
| cpe:2.3:a:netpbm:netpbm:10.35.46:*:*:*:*:*:*:* | 10.35.46 | Vulnerable | Netpbm |
- cpe:2.3:a:netpbm:netpbm:9.5:*:*:*:*:*:*:* Versions 9.5 Vulnerable ·Netpbm
- cpe:2.3:a:netpbm:netpbm:9.6:*:*:*:*:*:*:* Versions 9.6 Vulnerable ·Netpbm
- cpe:2.3:a:netpbm:netpbm:9.7:*:*:*:*:*:*:* Versions 9.7 Vulnerable ·Netpbm
- cpe:2.3:a:netpbm:netpbm:9.8:*:*:*:*:*:*:* Versions 9.8 Vulnerable ·Netpbm
- cpe:2.3:a:netpbm:netpbm:9.9:*:*:*:*:*:*:* Versions 9.9 Vulnerable ·Netpbm
- cpe:2.3:a:netpbm:netpbm:9.10:*:*:*:*:*:*:* Versions 9.10 Vulnerable ·Netpbm
- cpe:2.3:a:netpbm:netpbm:9.11:*:*:*:*:*:*:* Versions 9.11 Vulnerable ·Netpbm
- cpe:2.3:a:netpbm:netpbm:9.12:*:*:*:*:*:*:* Versions 9.12 Vulnerable ·Netpbm
- cpe:2.3:a:netpbm:netpbm:9.13:*:*:*:*:*:*:* Versions 9.13 Vulnerable ·Netpbm
- cpe:2.3:a:netpbm:netpbm:9.14:*:*:*:*:*:*:* Versions 9.14 Vulnerable ·Netpbm
- cpe:2.3:a:netpbm:netpbm:9.15:*:*:*:*:*:*:* Versions 9.15 Vulnerable ·Netpbm
- cpe:2.3:a:netpbm:netpbm:9.16:*:*:*:*:*:*:* Versions 9.16 Vulnerable ·Netpbm
- cpe:2.3:a:netpbm:netpbm:9.17:*:*:*:*:*:*:* Versions 9.17 Vulnerable ·Netpbm
- cpe:2.3:a:netpbm:netpbm:9.18:*:*:*:*:*:*:* Versions 9.18 Vulnerable ·Netpbm
- cpe:2.3:a:netpbm:netpbm:9.19:*:*:*:*:*:*:* Versions 9.19 Vulnerable ·Netpbm
- cpe:2.3:a:netpbm:netpbm:9.20:*:*:*:*:*:*:* Versions 9.20 Vulnerable ·Netpbm
- cpe:2.3:a:netpbm:netpbm:9.21:*:*:*:*:*:*:* Versions 9.21 Vulnerable ·Netpbm
- cpe:2.3:a:netpbm:netpbm:9.22:*:*:*:*:*:*:* Versions 9.22 Vulnerable ·Netpbm
- cpe:2.3:a:netpbm:netpbm:9.23:*:*:*:*:*:*:* Versions 9.23 Vulnerable ·Netpbm
- cpe:2.3:a:netpbm:netpbm:9.24:*:*:*:*:*:*:* Versions 9.24 Vulnerable ·Netpbm
- cpe:2.3:a:netpbm:netpbm:9.25:*:*:*:*:*:*:* Versions 9.25 Vulnerable ·Netpbm
- cpe:2.3:a:netpbm:netpbm:10.0:*:*:*:*:*:*:* Versions 10.0 Vulnerable ·Netpbm
- cpe:2.3:a:netpbm:netpbm:10.1:*:*:*:*:*:*:* Versions 10.1 Vulnerable ·Netpbm
- cpe:2.3:a:netpbm:netpbm:10.2:*:*:*:*:*:*:* Versions 10.2 Vulnerable ·Netpbm
- cpe:2.3:a:netpbm:netpbm:10.3:*:*:*:*:*:*:* Versions 10.3 Vulnerable ·Netpbm
- cpe:2.3:a:netpbm:netpbm:10.4:*:*:*:*:*:*:* Versions 10.4 Vulnerable ·Netpbm
- cpe:2.3:a:netpbm:netpbm:10.5:*:*:*:*:*:*:* Versions 10.5 Vulnerable ·Netpbm
- cpe:2.3:a:netpbm:netpbm:10.6:*:*:*:*:*:*:* Versions 10.6 Vulnerable ·Netpbm
- cpe:2.3:a:netpbm:netpbm:10.7:*:*:*:*:*:*:* Versions 10.7 Vulnerable ·Netpbm
- cpe:2.3:a:netpbm:netpbm:10.8:*:*:*:*:*:*:* Versions 10.8 Vulnerable ·Netpbm
- cpe:2.3:a:netpbm:netpbm:10.9:*:*:*:*:*:*:* Versions 10.9 Vulnerable ·Netpbm
- cpe:2.3:a:netpbm:netpbm:10.10:*:*:*:*:*:*:* Versions 10.10 Vulnerable ·Netpbm
- cpe:2.3:a:netpbm:netpbm:10.12:*:*:*:*:*:*:* Versions 10.12 Vulnerable ·Netpbm
- cpe:2.3:a:netpbm:netpbm:10.13:*:*:*:*:*:*:* Versions 10.13 Vulnerable ·Netpbm
- cpe:2.3:a:netpbm:netpbm:10.14:*:*:*:*:*:*:* Versions 10.14 Vulnerable ·Netpbm
- cpe:2.3:a:netpbm:netpbm:10.15:*:*:*:*:*:*:* Versions 10.15 Vulnerable ·Netpbm
- cpe:2.3:a:netpbm:netpbm:10.16:*:*:*:*:*:*:* Versions 10.16 Vulnerable ·Netpbm
- cpe:2.3:a:netpbm:netpbm:10.17:*:*:*:*:*:*:* Versions 10.17 Vulnerable ·Netpbm
- cpe:2.3:a:netpbm:netpbm:10.18:*:*:*:*:*:*:* Versions 10.18 Vulnerable ·Netpbm
- cpe:2.3:a:netpbm:netpbm:10.19:*:*:*:*:*:*:* Versions 10.19 Vulnerable ·Netpbm
- cpe:2.3:a:netpbm:netpbm:10.20:*:*:*:*:*:*:* Versions 10.20 Vulnerable ·Netpbm
- cpe:2.3:a:netpbm:netpbm:10.21:*:*:*:*:*:*:* Versions 10.21 Vulnerable ·Netpbm
- cpe:2.3:a:netpbm:netpbm:10.22:*:*:*:*:*:*:* Versions 10.22 Vulnerable ·Netpbm
- cpe:2.3:a:netpbm:netpbm:10.23:*:*:*:*:*:*:* Versions 10.23 Vulnerable ·Netpbm
- cpe:2.3:a:netpbm:netpbm:10.24:*:*:*:*:*:*:* Versions 10.24 Vulnerable ·Netpbm
- cpe:2.3:a:netpbm:netpbm:10.25:*:*:*:*:*:*:* Versions 10.25 Vulnerable ·Netpbm
- cpe:2.3:a:netpbm:netpbm:10.26:*:*:*:*:*:*:* Versions 10.26 Vulnerable ·Netpbm
- cpe:2.3:a:netpbm:netpbm:10.27:*:*:*:*:*:*:* Versions 10.27 Vulnerable ·Netpbm
- cpe:2.3:a:netpbm:netpbm:10.28:*:*:*:*:*:*:* Versions 10.28 Vulnerable ·Netpbm
- cpe:2.3:a:netpbm:netpbm:10.29:*:*:*:*:*:*:* Versions 10.29 Vulnerable ·Netpbm
- cpe:2.3:a:netpbm:netpbm:10.30:*:*:*:*:*:*:* Versions 10.30 Vulnerable ·Netpbm
- cpe:2.3:a:netpbm:netpbm:10.31:*:*:*:*:*:*:* Versions 10.31 Vulnerable ·Netpbm
- cpe:2.3:a:netpbm:netpbm:10.32:*:*:*:*:*:*:* Versions 10.32 Vulnerable ·Netpbm
- cpe:2.3:a:netpbm:netpbm:10.33:*:*:*:*:*:*:* Versions 10.33 Vulnerable ·Netpbm
- cpe:2.3:a:netpbm:netpbm:10.34:*:*:*:*:*:*:* Versions 10.34 Vulnerable ·Netpbm
- cpe:2.3:a:netpbm:netpbm:10.35.00:*:*:*:*:*:*:* Versions 10.35.00 Vulnerable ·Netpbm
- cpe:2.3:a:netpbm:netpbm:10.35.01:*:*:*:*:*:*:* Versions 10.35.01 Vulnerable ·Netpbm
- cpe:2.3:a:netpbm:netpbm:10.35.02:*:*:*:*:*:*:* Versions 10.35.02 Vulnerable ·Netpbm
- cpe:2.3:a:netpbm:netpbm:10.35.03:*:*:*:*:*:*:* Versions 10.35.03 Vulnerable ·Netpbm
- cpe:2.3:a:netpbm:netpbm:10.35.04:*:*:*:*:*:*:* Versions 10.35.04 Vulnerable ·Netpbm
- cpe:2.3:a:netpbm:netpbm:10.35.05:*:*:*:*:*:*:* Versions 10.35.05 Vulnerable ·Netpbm
- cpe:2.3:a:netpbm:netpbm:10.35.06:*:*:*:*:*:*:* Versions 10.35.06 Vulnerable ·Netpbm
- cpe:2.3:a:netpbm:netpbm:10.35.07:*:*:*:*:*:*:* Versions 10.35.07 Vulnerable ·Netpbm
- cpe:2.3:a:netpbm:netpbm:10.35.08:*:*:*:*:*:*:* Versions 10.35.08 Vulnerable ·Netpbm
- cpe:2.3:a:netpbm:netpbm:10.35.09:*:*:*:*:*:*:* Versions 10.35.09 Vulnerable ·Netpbm
- cpe:2.3:a:netpbm:netpbm:10.35.10:*:*:*:*:*:*:* Versions 10.35.10 Vulnerable ·Netpbm
- cpe:2.3:a:netpbm:netpbm:10.35.11:*:*:*:*:*:*:* Versions 10.35.11 Vulnerable ·Netpbm
- cpe:2.3:a:netpbm:netpbm:10.35.12:*:*:*:*:*:*:* Versions 10.35.12 Vulnerable ·Netpbm
- cpe:2.3:a:netpbm:netpbm:10.35.13:*:*:*:*:*:*:* Versions 10.35.13 Vulnerable ·Netpbm
- cpe:2.3:a:netpbm:netpbm:10.35.14:*:*:*:*:*:*:* Versions 10.35.14 Vulnerable ·Netpbm
- cpe:2.3:a:netpbm:netpbm:10.35.15:*:*:*:*:*:*:* Versions 10.35.15 Vulnerable ·Netpbm
- cpe:2.3:a:netpbm:netpbm:10.35.16:*:*:*:*:*:*:* Versions 10.35.16 Vulnerable ·Netpbm
- cpe:2.3:a:netpbm:netpbm:10.35.17:*:*:*:*:*:*:* Versions 10.35.17 Vulnerable ·Netpbm
- cpe:2.3:a:netpbm:netpbm:10.35.18:*:*:*:*:*:*:* Versions 10.35.18 Vulnerable ·Netpbm
- cpe:2.3:a:netpbm:netpbm:10.35.19:*:*:*:*:*:*:* Versions 10.35.19 Vulnerable ·Netpbm
- cpe:2.3:a:netpbm:netpbm:10.35.20:*:*:*:*:*:*:* Versions 10.35.20 Vulnerable ·Netpbm
- cpe:2.3:a:netpbm:netpbm:10.35.21:*:*:*:*:*:*:* Versions 10.35.21 Vulnerable ·Netpbm
- cpe:2.3:a:netpbm:netpbm:10.35.22:*:*:*:*:*:*:* Versions 10.35.22 Vulnerable ·Netpbm
- cpe:2.3:a:netpbm:netpbm:10.35.23:*:*:*:*:*:*:* Versions 10.35.23 Vulnerable ·Netpbm
- cpe:2.3:a:netpbm:netpbm:10.35.24:*:*:*:*:*:*:* Versions 10.35.24 Vulnerable ·Netpbm
- cpe:2.3:a:netpbm:netpbm:10.35.25:*:*:*:*:*:*:* Versions 10.35.25 Vulnerable ·Netpbm
- cpe:2.3:a:netpbm:netpbm:10.35.26:*:*:*:*:*:*:* Versions 10.35.26 Vulnerable ·Netpbm
- cpe:2.3:a:netpbm:netpbm:10.35.27:*:*:*:*:*:*:* Versions 10.35.27 Vulnerable ·Netpbm
- cpe:2.3:a:netpbm:netpbm:10.35.28:*:*:*:*:*:*:* Versions 10.35.28 Vulnerable ·Netpbm
- cpe:2.3:a:netpbm:netpbm:10.35.29:*:*:*:*:*:*:* Versions 10.35.29 Vulnerable ·Netpbm
- cpe:2.3:a:netpbm:netpbm:10.35.30:*:*:*:*:*:*:* Versions 10.35.30 Vulnerable ·Netpbm
- cpe:2.3:a:netpbm:netpbm:10.35.31:*:*:*:*:*:*:* Versions 10.35.31 Vulnerable ·Netpbm
- cpe:2.3:a:netpbm:netpbm:10.35.32:*:*:*:*:*:*:* Versions 10.35.32 Vulnerable ·Netpbm
- cpe:2.3:a:netpbm:netpbm:10.35.33:*:*:*:*:*:*:* Versions 10.35.33 Vulnerable ·Netpbm
- cpe:2.3:a:netpbm:netpbm:10.35.34:*:*:*:*:*:*:* Versions 10.35.34 Vulnerable ·Netpbm
- cpe:2.3:a:netpbm:netpbm:10.35.35:*:*:*:*:*:*:* Versions 10.35.35 Vulnerable ·Netpbm
- cpe:2.3:a:netpbm:netpbm:10.35.36:*:*:*:*:*:*:* Versions 10.35.36 Vulnerable ·Netpbm
- cpe:2.3:a:netpbm:netpbm:10.35.37:*:*:*:*:*:*:* Versions 10.35.37 Vulnerable ·Netpbm
- cpe:2.3:a:netpbm:netpbm:10.35.38:*:*:*:*:*:*:* Versions 10.35.38 Vulnerable ·Netpbm
- cpe:2.3:a:netpbm:netpbm:10.35.39:*:*:*:*:*:*:* Versions 10.35.39 Vulnerable ·Netpbm
- cpe:2.3:a:netpbm:netpbm:10.35.40:*:*:*:*:*:*:* Versions 10.35.40 Vulnerable ·Netpbm
- cpe:2.3:a:netpbm:netpbm:10.35.41:*:*:*:*:*:*:* Versions 10.35.41 Vulnerable ·Netpbm
- cpe:2.3:a:netpbm:netpbm:10.35.42:*:*:*:*:*:*:* Versions 10.35.42 Vulnerable ·Netpbm
- cpe:2.3:a:netpbm:netpbm:10.35.43:*:*:*:*:*:*:* Versions 10.35.43 Vulnerable ·Netpbm
- cpe:2.3:a:netpbm:netpbm:10.35.44:*:*:*:*:*:*:* Versions 10.35.44 Vulnerable ·Netpbm
- cpe:2.3:a:netpbm:netpbm:10.35.45:*:*:*:*:*:*:* Versions 10.35.45 Vulnerable ·Netpbm
- cpe:2.3:a:netpbm:netpbm:10.35.46:*:*:*:*:*:*:* Versions 10.35.46 Vulnerable ·Netpbm
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2008-4799
- 2026-10-03 Alias added: GHSA-gq8f-8634-82fx
References
More Netpbm vulnerabilities
- TI-2003-00141 Multiple vulnerabilities in NetPBM 9.20 and earlier, and possibly other versions, may… CVSS 2.0HIGH 7.5
- TI-2005-02810 pnmtopng in netpbm before 10.25, when using the -trans option, uses uninitialized size… CVSS 2.0HIGH 7.5
- TI-2009-04054 Stack-based buffer overflow in converter/ppm/xpmtoppm.c in netpbm before 10.47.07 allows… CVSS 2.0HIGH 7.5
- TI-2005-02339 pstopnm in netpbm does not properly use the "-dSAFER" option when calling Ghostscript to… CVSS 2.0HIGH 7.5
- TI-2008-00526 Buffer overflow in the readImageData function in giftopnm.c in netpbm before 10.27 in… CVSS 2.0MEDIUM 6.8
- TI-2006-03045 Buffer overflow in pamtofits of NetPBM 10.30 through 10.33 allows remote attackers to… CVSS 2.0MEDIUM 5.0
Sources
- CVE-2008-4799 · CVE Program
- CVE-2008-4799 · NVD
- FIRST EPSS
- GHSA-gq8f-8634-82fx · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences