Read the docs
TI-2009-04054 Aliases CVE-2009-4274GHSA-45q7-r4qg-42p8

Stack-based buffer overflow in converter/ppm/xpmtoppm.c in netpbm before 10.47.07 allows…

Priority MEDIUM 40CWE-119Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
— Not recorded in CVSS 2.0
Attack complexity
Low
Impact type
Code execution
Confidentiality · integrity · availability
Partial · Partial · Partial
Fix status
Partial Red Hat: 7 fixed, 1 without a fix

Attack profile from CVSS 2.0 · NVD. Fix status from CNA and Red Hat. Impact type from CWE-119 and the CVSS impact.

Summary

Stack-based buffer overflow in converter/ppm/xpmtoppm.c in netpbm before 10.47.07 allows context-dependent attackers to cause a denial of service (application crash) or possibly execute arbitrary code via an XPM image file that contains a crafted header field associated with a large color index value.

Why it matters now

EPSS 0.04539 91st percentileScored 2026-11-07
Fix Partial Red Hat: 1 advisoryRed Hat: 7 fixed, 1 without a fix

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 101

CPEVersionsRoleVendor
cpe:2.3:a:netpbm:netpbm:10.0:*:*:*:*:*:*:*10.0VulnerableNetpbm
cpe:2.3:a:netpbm:netpbm:10.1:*:*:*:*:*:*:*10.1VulnerableNetpbm
cpe:2.3:a:netpbm:netpbm:10.2:*:*:*:*:*:*:*10.2VulnerableNetpbm
cpe:2.3:a:netpbm:netpbm:10.3:*:*:*:*:*:*:*10.3VulnerableNetpbm
cpe:2.3:a:netpbm:netpbm:10.4:*:*:*:*:*:*:*10.4VulnerableNetpbm
cpe:2.3:a:netpbm:netpbm:10.5:*:*:*:*:*:*:*10.5VulnerableNetpbm
cpe:2.3:a:netpbm:netpbm:10.6:*:*:*:*:*:*:*10.6VulnerableNetpbm
cpe:2.3:a:netpbm:netpbm:10.7:*:*:*:*:*:*:*10.7VulnerableNetpbm
cpe:2.3:a:netpbm:netpbm:10.8:*:*:*:*:*:*:*10.8VulnerableNetpbm
cpe:2.3:a:netpbm:netpbm:10.9:*:*:*:*:*:*:*10.9VulnerableNetpbm
  • cpe:2.3:a:netpbm:netpbm:10.0:*:*:*:*:*:*:* Versions 10.0 Vulnerable ·Netpbm
  • cpe:2.3:a:netpbm:netpbm:10.1:*:*:*:*:*:*:* Versions 10.1 Vulnerable ·Netpbm
  • cpe:2.3:a:netpbm:netpbm:10.2:*:*:*:*:*:*:* Versions 10.2 Vulnerable ·Netpbm
  • cpe:2.3:a:netpbm:netpbm:10.3:*:*:*:*:*:*:* Versions 10.3 Vulnerable ·Netpbm
  • cpe:2.3:a:netpbm:netpbm:10.4:*:*:*:*:*:*:* Versions 10.4 Vulnerable ·Netpbm
  • cpe:2.3:a:netpbm:netpbm:10.5:*:*:*:*:*:*:* Versions 10.5 Vulnerable ·Netpbm
  • cpe:2.3:a:netpbm:netpbm:10.6:*:*:*:*:*:*:* Versions 10.6 Vulnerable ·Netpbm
  • cpe:2.3:a:netpbm:netpbm:10.7:*:*:*:*:*:*:* Versions 10.7 Vulnerable ·Netpbm
  • cpe:2.3:a:netpbm:netpbm:10.8:*:*:*:*:*:*:* Versions 10.8 Vulnerable ·Netpbm
  • cpe:2.3:a:netpbm:netpbm:10.9:*:*:*:*:*:*:* Versions 10.9 Vulnerable ·Netpbm
Show 91 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:netpbm:netpbm:10.10:*:*:*:*:*:*:*10.10VulnerableNetpbm
cpe:2.3:a:netpbm:netpbm:10.11:*:*:*:*:*:*:*10.11VulnerableNetpbm
cpe:2.3:a:netpbm:netpbm:10.12:*:*:*:*:*:*:*10.12VulnerableNetpbm
cpe:2.3:a:netpbm:netpbm:10.13:*:*:*:*:*:*:*10.13VulnerableNetpbm
cpe:2.3:a:netpbm:netpbm:10.14:*:*:*:*:*:*:*10.14VulnerableNetpbm
cpe:2.3:a:netpbm:netpbm:10.15:*:*:*:*:*:*:*10.15VulnerableNetpbm
cpe:2.3:a:netpbm:netpbm:10.16:*:*:*:*:*:*:*10.16VulnerableNetpbm
cpe:2.3:a:netpbm:netpbm:10.17:*:*:*:*:*:*:*10.17VulnerableNetpbm
cpe:2.3:a:netpbm:netpbm:10.18:*:*:*:*:*:*:*10.18VulnerableNetpbm
cpe:2.3:a:netpbm:netpbm:10.19:*:*:*:*:*:*:*10.19VulnerableNetpbm
cpe:2.3:a:netpbm:netpbm:10.20:*:*:*:*:*:*:*10.20VulnerableNetpbm
cpe:2.3:a:netpbm:netpbm:10.21:*:*:*:*:*:*:*10.21VulnerableNetpbm
cpe:2.3:a:netpbm:netpbm:10.22:*:*:*:*:*:*:*10.22VulnerableNetpbm
cpe:2.3:a:netpbm:netpbm:10.23:*:*:*:*:*:*:*10.23VulnerableNetpbm
cpe:2.3:a:netpbm:netpbm:10.24:*:*:*:*:*:*:*10.24VulnerableNetpbm
cpe:2.3:a:netpbm:netpbm:10.25:*:*:*:*:*:*:*10.25VulnerableNetpbm
cpe:2.3:a:netpbm:netpbm:10.26:*:*:*:*:*:*:*10.26VulnerableNetpbm
cpe:2.3:a:netpbm:netpbm:10.27:*:*:*:*:*:*:*10.27VulnerableNetpbm
cpe:2.3:a:netpbm:netpbm:10.28:*:*:*:*:*:*:*10.28VulnerableNetpbm
cpe:2.3:a:netpbm:netpbm:10.29:*:*:*:*:*:*:*10.29VulnerableNetpbm
cpe:2.3:a:netpbm:netpbm:10.30:*:*:*:*:*:*:*10.30VulnerableNetpbm
cpe:2.3:a:netpbm:netpbm:10.31:*:*:*:*:*:*:*10.31VulnerableNetpbm
cpe:2.3:a:netpbm:netpbm:10.32:*:*:*:*:*:*:*10.32VulnerableNetpbm
cpe:2.3:a:netpbm:netpbm:10.33:*:*:*:*:*:*:*10.33VulnerableNetpbm
cpe:2.3:a:netpbm:netpbm:10.34:*:*:*:*:*:*:*10.34VulnerableNetpbm
cpe:2.3:a:netpbm:netpbm:10.35.00:*:*:*:*:*:*:*10.35.00VulnerableNetpbm
cpe:2.3:a:netpbm:netpbm:10.35.01:*:*:*:*:*:*:*10.35.01VulnerableNetpbm
cpe:2.3:a:netpbm:netpbm:10.35.02:*:*:*:*:*:*:*10.35.02VulnerableNetpbm
cpe:2.3:a:netpbm:netpbm:10.35.03:*:*:*:*:*:*:*10.35.03VulnerableNetpbm
cpe:2.3:a:netpbm:netpbm:10.35.04:*:*:*:*:*:*:*10.35.04VulnerableNetpbm
cpe:2.3:a:netpbm:netpbm:10.35.05:*:*:*:*:*:*:*10.35.05VulnerableNetpbm
cpe:2.3:a:netpbm:netpbm:10.35.06:*:*:*:*:*:*:*10.35.06VulnerableNetpbm
cpe:2.3:a:netpbm:netpbm:10.35.07:*:*:*:*:*:*:*10.35.07VulnerableNetpbm
cpe:2.3:a:netpbm:netpbm:10.35.08:*:*:*:*:*:*:*10.35.08VulnerableNetpbm
cpe:2.3:a:netpbm:netpbm:10.35.09:*:*:*:*:*:*:*10.35.09VulnerableNetpbm
cpe:2.3:a:netpbm:netpbm:10.35.10:*:*:*:*:*:*:*10.35.10VulnerableNetpbm
cpe:2.3:a:netpbm:netpbm:10.35.11:*:*:*:*:*:*:*10.35.11VulnerableNetpbm
cpe:2.3:a:netpbm:netpbm:10.35.12:*:*:*:*:*:*:*10.35.12VulnerableNetpbm
cpe:2.3:a:netpbm:netpbm:10.35.13:*:*:*:*:*:*:*10.35.13VulnerableNetpbm
cpe:2.3:a:netpbm:netpbm:10.35.14:*:*:*:*:*:*:*10.35.14VulnerableNetpbm
cpe:2.3:a:netpbm:netpbm:10.35.15:*:*:*:*:*:*:*10.35.15VulnerableNetpbm
cpe:2.3:a:netpbm:netpbm:10.35.16:*:*:*:*:*:*:*10.35.16VulnerableNetpbm
cpe:2.3:a:netpbm:netpbm:10.35.17:*:*:*:*:*:*:*10.35.17VulnerableNetpbm
cpe:2.3:a:netpbm:netpbm:10.35.18:*:*:*:*:*:*:*10.35.18VulnerableNetpbm
cpe:2.3:a:netpbm:netpbm:10.35.19:*:*:*:*:*:*:*10.35.19VulnerableNetpbm
cpe:2.3:a:netpbm:netpbm:10.35.20:*:*:*:*:*:*:*10.35.20VulnerableNetpbm
cpe:2.3:a:netpbm:netpbm:10.35.21:*:*:*:*:*:*:*10.35.21VulnerableNetpbm
cpe:2.3:a:netpbm:netpbm:10.35.22:*:*:*:*:*:*:*10.35.22VulnerableNetpbm
cpe:2.3:a:netpbm:netpbm:10.35.23:*:*:*:*:*:*:*10.35.23VulnerableNetpbm
cpe:2.3:a:netpbm:netpbm:10.35.24:*:*:*:*:*:*:*10.35.24VulnerableNetpbm
cpe:2.3:a:netpbm:netpbm:10.35.25:*:*:*:*:*:*:*10.35.25VulnerableNetpbm
cpe:2.3:a:netpbm:netpbm:10.35.26:*:*:*:*:*:*:*10.35.26VulnerableNetpbm
cpe:2.3:a:netpbm:netpbm:10.35.27:*:*:*:*:*:*:*10.35.27VulnerableNetpbm
cpe:2.3:a:netpbm:netpbm:10.35.28:*:*:*:*:*:*:*10.35.28VulnerableNetpbm
cpe:2.3:a:netpbm:netpbm:10.35.29:*:*:*:*:*:*:*10.35.29VulnerableNetpbm
cpe:2.3:a:netpbm:netpbm:10.35.30:*:*:*:*:*:*:*10.35.30VulnerableNetpbm
cpe:2.3:a:netpbm:netpbm:10.35.31:*:*:*:*:*:*:*10.35.31VulnerableNetpbm
cpe:2.3:a:netpbm:netpbm:10.35.32:*:*:*:*:*:*:*10.35.32VulnerableNetpbm
cpe:2.3:a:netpbm:netpbm:10.35.33:*:*:*:*:*:*:*10.35.33VulnerableNetpbm
cpe:2.3:a:netpbm:netpbm:10.35.34:*:*:*:*:*:*:*10.35.34VulnerableNetpbm
cpe:2.3:a:netpbm:netpbm:10.35.35:*:*:*:*:*:*:*10.35.35VulnerableNetpbm
cpe:2.3:a:netpbm:netpbm:10.35.36:*:*:*:*:*:*:*10.35.36VulnerableNetpbm
cpe:2.3:a:netpbm:netpbm:10.35.37:*:*:*:*:*:*:*10.35.37VulnerableNetpbm
cpe:2.3:a:netpbm:netpbm:10.35.38:*:*:*:*:*:*:*10.35.38VulnerableNetpbm
cpe:2.3:a:netpbm:netpbm:10.35.39:*:*:*:*:*:*:*10.35.39VulnerableNetpbm
cpe:2.3:a:netpbm:netpbm:10.35.40:*:*:*:*:*:*:*10.35.40VulnerableNetpbm
cpe:2.3:a:netpbm:netpbm:10.35.41:*:*:*:*:*:*:*10.35.41VulnerableNetpbm
cpe:2.3:a:netpbm:netpbm:10.35.42:*:*:*:*:*:*:*10.35.42VulnerableNetpbm
cpe:2.3:a:netpbm:netpbm:10.35.43:*:*:*:*:*:*:*10.35.43VulnerableNetpbm
cpe:2.3:a:netpbm:netpbm:10.35.44:*:*:*:*:*:*:*10.35.44VulnerableNetpbm
cpe:2.3:a:netpbm:netpbm:10.35.45:*:*:*:*:*:*:*10.35.45VulnerableNetpbm
cpe:2.3:a:netpbm:netpbm:10.35.46:*:*:*:*:*:*:*10.35.46VulnerableNetpbm
cpe:2.3:a:netpbm:netpbm:10.35.47:*:*:*:*:*:*:*10.35.47VulnerableNetpbm
cpe:2.3:a:netpbm:netpbm:10.36.00:*:*:*:*:*:*:*10.36.00VulnerableNetpbm
cpe:2.3:a:netpbm:netpbm:10.37.00:*:*:*:*:*:*:*10.37.00VulnerableNetpbm
cpe:2.3:a:netpbm:netpbm:10.38.00:*:*:*:*:*:*:*10.38.00VulnerableNetpbm
cpe:2.3:a:netpbm:netpbm:10.39.00:*:*:*:*:*:*:*10.39.00VulnerableNetpbm
cpe:2.3:a:netpbm:netpbm:10.40.00:*:*:*:*:*:*:*10.40.00VulnerableNetpbm
cpe:2.3:a:netpbm:netpbm:10.41.00:*:*:*:*:*:*:*10.41.00VulnerableNetpbm
cpe:2.3:a:netpbm:netpbm:10.42.00:*:*:*:*:*:*:*10.42.00VulnerableNetpbm
cpe:2.3:a:netpbm:netpbm:10.43.00:*:*:*:*:*:*:*10.43.00VulnerableNetpbm
cpe:2.3:a:netpbm:netpbm:10.44.00:*:*:*:*:*:*:*10.44.00VulnerableNetpbm
cpe:2.3:a:netpbm:netpbm:10.45.00:*:*:*:*:*:*:*10.45.00VulnerableNetpbm
cpe:2.3:a:netpbm:netpbm:10.46.00:*:*:*:*:*:*:*10.46.00VulnerableNetpbm
cpe:2.3:a:netpbm:netpbm:10.47.00:*:*:*:*:*:*:*10.47.00VulnerableNetpbm
cpe:2.3:a:netpbm:netpbm:10.47.01:*:*:*:*:*:*:*10.47.01VulnerableNetpbm
cpe:2.3:a:netpbm:netpbm:10.47.02:*:*:*:*:*:*:*10.47.02VulnerableNetpbm
cpe:2.3:a:netpbm:netpbm:10.47.03:*:*:*:*:*:*:*10.47.03VulnerableNetpbm
cpe:2.3:a:netpbm:netpbm:10.47.04:*:*:*:*:*:*:*10.47.04VulnerableNetpbm
cpe:2.3:a:netpbm:netpbm:10.47.05:*:*:*:*:*:*:*10.47.05VulnerableNetpbm
cpe:2.3:a:netpbm:netpbm:10.47.06:*:*:*:*:*:*:*10.47.06VulnerableNetpbm
  • cpe:2.3:a:netpbm:netpbm:10.10:*:*:*:*:*:*:* Versions 10.10 Vulnerable ·Netpbm
  • cpe:2.3:a:netpbm:netpbm:10.11:*:*:*:*:*:*:* Versions 10.11 Vulnerable ·Netpbm
  • cpe:2.3:a:netpbm:netpbm:10.12:*:*:*:*:*:*:* Versions 10.12 Vulnerable ·Netpbm
  • cpe:2.3:a:netpbm:netpbm:10.13:*:*:*:*:*:*:* Versions 10.13 Vulnerable ·Netpbm
  • cpe:2.3:a:netpbm:netpbm:10.14:*:*:*:*:*:*:* Versions 10.14 Vulnerable ·Netpbm
  • cpe:2.3:a:netpbm:netpbm:10.15:*:*:*:*:*:*:* Versions 10.15 Vulnerable ·Netpbm
  • cpe:2.3:a:netpbm:netpbm:10.16:*:*:*:*:*:*:* Versions 10.16 Vulnerable ·Netpbm
  • cpe:2.3:a:netpbm:netpbm:10.17:*:*:*:*:*:*:* Versions 10.17 Vulnerable ·Netpbm
  • cpe:2.3:a:netpbm:netpbm:10.18:*:*:*:*:*:*:* Versions 10.18 Vulnerable ·Netpbm
  • cpe:2.3:a:netpbm:netpbm:10.19:*:*:*:*:*:*:* Versions 10.19 Vulnerable ·Netpbm
  • cpe:2.3:a:netpbm:netpbm:10.20:*:*:*:*:*:*:* Versions 10.20 Vulnerable ·Netpbm
  • cpe:2.3:a:netpbm:netpbm:10.21:*:*:*:*:*:*:* Versions 10.21 Vulnerable ·Netpbm
  • cpe:2.3:a:netpbm:netpbm:10.22:*:*:*:*:*:*:* Versions 10.22 Vulnerable ·Netpbm
  • cpe:2.3:a:netpbm:netpbm:10.23:*:*:*:*:*:*:* Versions 10.23 Vulnerable ·Netpbm
  • cpe:2.3:a:netpbm:netpbm:10.24:*:*:*:*:*:*:* Versions 10.24 Vulnerable ·Netpbm
  • cpe:2.3:a:netpbm:netpbm:10.25:*:*:*:*:*:*:* Versions 10.25 Vulnerable ·Netpbm
  • cpe:2.3:a:netpbm:netpbm:10.26:*:*:*:*:*:*:* Versions 10.26 Vulnerable ·Netpbm
  • cpe:2.3:a:netpbm:netpbm:10.27:*:*:*:*:*:*:* Versions 10.27 Vulnerable ·Netpbm
  • cpe:2.3:a:netpbm:netpbm:10.28:*:*:*:*:*:*:* Versions 10.28 Vulnerable ·Netpbm
  • cpe:2.3:a:netpbm:netpbm:10.29:*:*:*:*:*:*:* Versions 10.29 Vulnerable ·Netpbm
  • cpe:2.3:a:netpbm:netpbm:10.30:*:*:*:*:*:*:* Versions 10.30 Vulnerable ·Netpbm
  • cpe:2.3:a:netpbm:netpbm:10.31:*:*:*:*:*:*:* Versions 10.31 Vulnerable ·Netpbm
  • cpe:2.3:a:netpbm:netpbm:10.32:*:*:*:*:*:*:* Versions 10.32 Vulnerable ·Netpbm
  • cpe:2.3:a:netpbm:netpbm:10.33:*:*:*:*:*:*:* Versions 10.33 Vulnerable ·Netpbm
  • cpe:2.3:a:netpbm:netpbm:10.34:*:*:*:*:*:*:* Versions 10.34 Vulnerable ·Netpbm
  • cpe:2.3:a:netpbm:netpbm:10.35.00:*:*:*:*:*:*:* Versions 10.35.00 Vulnerable ·Netpbm
  • cpe:2.3:a:netpbm:netpbm:10.35.01:*:*:*:*:*:*:* Versions 10.35.01 Vulnerable ·Netpbm
  • cpe:2.3:a:netpbm:netpbm:10.35.02:*:*:*:*:*:*:* Versions 10.35.02 Vulnerable ·Netpbm
  • cpe:2.3:a:netpbm:netpbm:10.35.03:*:*:*:*:*:*:* Versions 10.35.03 Vulnerable ·Netpbm
  • cpe:2.3:a:netpbm:netpbm:10.35.04:*:*:*:*:*:*:* Versions 10.35.04 Vulnerable ·Netpbm
  • cpe:2.3:a:netpbm:netpbm:10.35.05:*:*:*:*:*:*:* Versions 10.35.05 Vulnerable ·Netpbm
  • cpe:2.3:a:netpbm:netpbm:10.35.06:*:*:*:*:*:*:* Versions 10.35.06 Vulnerable ·Netpbm
  • cpe:2.3:a:netpbm:netpbm:10.35.07:*:*:*:*:*:*:* Versions 10.35.07 Vulnerable ·Netpbm
  • cpe:2.3:a:netpbm:netpbm:10.35.08:*:*:*:*:*:*:* Versions 10.35.08 Vulnerable ·Netpbm
  • cpe:2.3:a:netpbm:netpbm:10.35.09:*:*:*:*:*:*:* Versions 10.35.09 Vulnerable ·Netpbm
  • cpe:2.3:a:netpbm:netpbm:10.35.10:*:*:*:*:*:*:* Versions 10.35.10 Vulnerable ·Netpbm
  • cpe:2.3:a:netpbm:netpbm:10.35.11:*:*:*:*:*:*:* Versions 10.35.11 Vulnerable ·Netpbm
  • cpe:2.3:a:netpbm:netpbm:10.35.12:*:*:*:*:*:*:* Versions 10.35.12 Vulnerable ·Netpbm
  • cpe:2.3:a:netpbm:netpbm:10.35.13:*:*:*:*:*:*:* Versions 10.35.13 Vulnerable ·Netpbm
  • cpe:2.3:a:netpbm:netpbm:10.35.14:*:*:*:*:*:*:* Versions 10.35.14 Vulnerable ·Netpbm
  • cpe:2.3:a:netpbm:netpbm:10.35.15:*:*:*:*:*:*:* Versions 10.35.15 Vulnerable ·Netpbm
  • cpe:2.3:a:netpbm:netpbm:10.35.16:*:*:*:*:*:*:* Versions 10.35.16 Vulnerable ·Netpbm
  • cpe:2.3:a:netpbm:netpbm:10.35.17:*:*:*:*:*:*:* Versions 10.35.17 Vulnerable ·Netpbm
  • cpe:2.3:a:netpbm:netpbm:10.35.18:*:*:*:*:*:*:* Versions 10.35.18 Vulnerable ·Netpbm
  • cpe:2.3:a:netpbm:netpbm:10.35.19:*:*:*:*:*:*:* Versions 10.35.19 Vulnerable ·Netpbm
  • cpe:2.3:a:netpbm:netpbm:10.35.20:*:*:*:*:*:*:* Versions 10.35.20 Vulnerable ·Netpbm
  • cpe:2.3:a:netpbm:netpbm:10.35.21:*:*:*:*:*:*:* Versions 10.35.21 Vulnerable ·Netpbm
  • cpe:2.3:a:netpbm:netpbm:10.35.22:*:*:*:*:*:*:* Versions 10.35.22 Vulnerable ·Netpbm
  • cpe:2.3:a:netpbm:netpbm:10.35.23:*:*:*:*:*:*:* Versions 10.35.23 Vulnerable ·Netpbm
  • cpe:2.3:a:netpbm:netpbm:10.35.24:*:*:*:*:*:*:* Versions 10.35.24 Vulnerable ·Netpbm
  • cpe:2.3:a:netpbm:netpbm:10.35.25:*:*:*:*:*:*:* Versions 10.35.25 Vulnerable ·Netpbm
  • cpe:2.3:a:netpbm:netpbm:10.35.26:*:*:*:*:*:*:* Versions 10.35.26 Vulnerable ·Netpbm
  • cpe:2.3:a:netpbm:netpbm:10.35.27:*:*:*:*:*:*:* Versions 10.35.27 Vulnerable ·Netpbm
  • cpe:2.3:a:netpbm:netpbm:10.35.28:*:*:*:*:*:*:* Versions 10.35.28 Vulnerable ·Netpbm
  • cpe:2.3:a:netpbm:netpbm:10.35.29:*:*:*:*:*:*:* Versions 10.35.29 Vulnerable ·Netpbm
  • cpe:2.3:a:netpbm:netpbm:10.35.30:*:*:*:*:*:*:* Versions 10.35.30 Vulnerable ·Netpbm
  • cpe:2.3:a:netpbm:netpbm:10.35.31:*:*:*:*:*:*:* Versions 10.35.31 Vulnerable ·Netpbm
  • cpe:2.3:a:netpbm:netpbm:10.35.32:*:*:*:*:*:*:* Versions 10.35.32 Vulnerable ·Netpbm
  • cpe:2.3:a:netpbm:netpbm:10.35.33:*:*:*:*:*:*:* Versions 10.35.33 Vulnerable ·Netpbm
  • cpe:2.3:a:netpbm:netpbm:10.35.34:*:*:*:*:*:*:* Versions 10.35.34 Vulnerable ·Netpbm
  • cpe:2.3:a:netpbm:netpbm:10.35.35:*:*:*:*:*:*:* Versions 10.35.35 Vulnerable ·Netpbm
  • cpe:2.3:a:netpbm:netpbm:10.35.36:*:*:*:*:*:*:* Versions 10.35.36 Vulnerable ·Netpbm
  • cpe:2.3:a:netpbm:netpbm:10.35.37:*:*:*:*:*:*:* Versions 10.35.37 Vulnerable ·Netpbm
  • cpe:2.3:a:netpbm:netpbm:10.35.38:*:*:*:*:*:*:* Versions 10.35.38 Vulnerable ·Netpbm
  • cpe:2.3:a:netpbm:netpbm:10.35.39:*:*:*:*:*:*:* Versions 10.35.39 Vulnerable ·Netpbm
  • cpe:2.3:a:netpbm:netpbm:10.35.40:*:*:*:*:*:*:* Versions 10.35.40 Vulnerable ·Netpbm
  • cpe:2.3:a:netpbm:netpbm:10.35.41:*:*:*:*:*:*:* Versions 10.35.41 Vulnerable ·Netpbm
  • cpe:2.3:a:netpbm:netpbm:10.35.42:*:*:*:*:*:*:* Versions 10.35.42 Vulnerable ·Netpbm
  • cpe:2.3:a:netpbm:netpbm:10.35.43:*:*:*:*:*:*:* Versions 10.35.43 Vulnerable ·Netpbm
  • cpe:2.3:a:netpbm:netpbm:10.35.44:*:*:*:*:*:*:* Versions 10.35.44 Vulnerable ·Netpbm
  • cpe:2.3:a:netpbm:netpbm:10.35.45:*:*:*:*:*:*:* Versions 10.35.45 Vulnerable ·Netpbm
  • cpe:2.3:a:netpbm:netpbm:10.35.46:*:*:*:*:*:*:* Versions 10.35.46 Vulnerable ·Netpbm
  • cpe:2.3:a:netpbm:netpbm:10.35.47:*:*:*:*:*:*:* Versions 10.35.47 Vulnerable ·Netpbm
  • cpe:2.3:a:netpbm:netpbm:10.36.00:*:*:*:*:*:*:* Versions 10.36.00 Vulnerable ·Netpbm
  • cpe:2.3:a:netpbm:netpbm:10.37.00:*:*:*:*:*:*:* Versions 10.37.00 Vulnerable ·Netpbm
  • cpe:2.3:a:netpbm:netpbm:10.38.00:*:*:*:*:*:*:* Versions 10.38.00 Vulnerable ·Netpbm
  • cpe:2.3:a:netpbm:netpbm:10.39.00:*:*:*:*:*:*:* Versions 10.39.00 Vulnerable ·Netpbm
  • cpe:2.3:a:netpbm:netpbm:10.40.00:*:*:*:*:*:*:* Versions 10.40.00 Vulnerable ·Netpbm
  • cpe:2.3:a:netpbm:netpbm:10.41.00:*:*:*:*:*:*:* Versions 10.41.00 Vulnerable ·Netpbm
  • cpe:2.3:a:netpbm:netpbm:10.42.00:*:*:*:*:*:*:* Versions 10.42.00 Vulnerable ·Netpbm
  • cpe:2.3:a:netpbm:netpbm:10.43.00:*:*:*:*:*:*:* Versions 10.43.00 Vulnerable ·Netpbm
  • cpe:2.3:a:netpbm:netpbm:10.44.00:*:*:*:*:*:*:* Versions 10.44.00 Vulnerable ·Netpbm
  • cpe:2.3:a:netpbm:netpbm:10.45.00:*:*:*:*:*:*:* Versions 10.45.00 Vulnerable ·Netpbm
  • cpe:2.3:a:netpbm:netpbm:10.46.00:*:*:*:*:*:*:* Versions 10.46.00 Vulnerable ·Netpbm
  • cpe:2.3:a:netpbm:netpbm:10.47.00:*:*:*:*:*:*:* Versions 10.47.00 Vulnerable ·Netpbm
  • cpe:2.3:a:netpbm:netpbm:10.47.01:*:*:*:*:*:*:* Versions 10.47.01 Vulnerable ·Netpbm
  • cpe:2.3:a:netpbm:netpbm:10.47.02:*:*:*:*:*:*:* Versions 10.47.02 Vulnerable ·Netpbm
  • cpe:2.3:a:netpbm:netpbm:10.47.03:*:*:*:*:*:*:* Versions 10.47.03 Vulnerable ·Netpbm
  • cpe:2.3:a:netpbm:netpbm:10.47.04:*:*:*:*:*:*:* Versions 10.47.04 Vulnerable ·Netpbm
  • cpe:2.3:a:netpbm:netpbm:10.47.05:*:*:*:*:*:*:* Versions 10.47.05 Vulnerable ·Netpbm
  • cpe:2.3:a:netpbm:netpbm:10.47.06:*:*:*:*:*:*:* Versions 10.47.06 Vulnerable ·Netpbm

Remediation

Red Hat 1 advisory

  • RHSA-2011:1811 Released 2011-12-12 · Red Hat rating Important
    netpbm security update
    • RHEL Desktop Workstation (v. 5 client) netpbm-10.35.58-8.el5_7.3, netpbm-devel-10.35.58-8.el5_7.3, netpbm-devel-10.35.58-8.el5_7.3.i386
    • Red Hat Enterprise Linux (v. 5 server) netpbm-10.35.58-8.el5_7.3, netpbm-10.35.58-8.el5_7.3.i386, netpbm-10.35.58-8.el5_7.3.ia64 +9
    • Red Hat Enterprise Linux AS version 4 netpbm-10.35.58-8.el4, netpbm-10.35.58-8.el4.i386, netpbm-10.35.58-8.el4.ia64 +9
    • Red Hat Enterprise Linux Desktop (v. 5 client) netpbm-10.35.58-8.el5_7.3, netpbm-10.35.58-8.el5_7.3.i386, netpbm-progs-10.35.58-8.el5_7.3 +1
    • Red Hat Enterprise Linux Desktop version 4 netpbm-10.35.58-8.el4, netpbm-10.35.58-8.el4.i386, netpbm-devel-10.35.58-8.el4 +3
    • Red Hat Enterprise Linux ES version 4 netpbm-10.35.58-8.el4, netpbm-10.35.58-8.el4.i386, netpbm-10.35.58-8.el4.ia64 +6
    • Red Hat Enterprise Linux WS version 4 netpbm-10.35.58-8.el4, netpbm-10.35.58-8.el4.i386, netpbm-10.35.58-8.el4.ia64 +6

Vendor assessments

Red Hat

Red Hat rating: Moderate. Red Hat's page for this CVE →

ProductStatusPlan or fix
Red Hat Enterprise Linux 6AffectedNo fix yet
RHEL Desktop Workstation (v. 5 client)Fixed RHSA-2011:1811
Red Hat Enterprise Linux (v. 5 server)Fixed RHSA-2011:1811
Red Hat Enterprise Linux AS version 4Fixed RHSA-2011:1811
Red Hat Enterprise Linux Desktop (v. 5 client)Fixed RHSA-2011:1811
Red Hat Enterprise Linux Desktop version 4Fixed RHSA-2011:1811
Red Hat Enterprise Linux ES version 4Fixed RHSA-2011:1811
Red Hat Enterprise Linux WS version 4Fixed RHSA-2011:1811

Timeline

  1. 2026-10-02 Threatist record created from CVE-2009-4274
  2. 2026-10-03 Alias added: GHSA-45q7-r4qg-42p8

References

Advisory 5

Other 5

  • TI-2003-00141 Multiple vulnerabilities in NetPBM 9.20 and earlier, and possibly other versions, may… CVSS 2.0HIGH 7.5
  • TI-2005-02810 pnmtopng in netpbm before 10.25, when using the -trans option, uses uninitialized size… CVSS 2.0HIGH 7.5
  • TI-2005-02339 pstopnm in netpbm does not properly use the "-dSAFER" option when calling Ghostscript to… CVSS 2.0HIGH 7.5
  • TI-2008-00526 Buffer overflow in the readImageData function in giftopnm.c in netpbm before 10.27 in… CVSS 2.0MEDIUM 6.8
  • TI-2006-03045 Buffer overflow in pamtofits of NetPBM 10.30 through 10.33 allows remote attackers to… CVSS 2.0MEDIUM 5.0
  • TI-2008-04582 pamperspective in Netpbm before 10.35.48 does not properly calculate a window height… CVSS 2.0MEDIUM 4.3
See all 8 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences