CVE-2005-2471: High severity netpbm netpbm vulnerability
Published Aug 5, 2005
·Updated
pstopnm in netpbm does not properly use the "-dSAFER" option when calling Ghostscript to convert a PostScript file into a (1) PBM, (2) PGM, or (3) PNM file, which allows external user-assisted attackers to execute arbitrary commands.
Affected Software
1 affected component
Netpbm netpbm=2.10.0.8
Event History
Aug 5, 2005
CVE Published
04:00 AM
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2005-2471?
CVE-2005-2471 is considered a critical vulnerability due to the potential for arbitrary command execution.
2
How do I fix CVE-2005-2471?
To fix CVE-2005-2471, upgrade to a version of netpbm that does not have this vulnerability.
3
What software is affected by CVE-2005-2471?
CVE-2005-2471 affects netpbm version 2.10.0.8.
4
Can CVE-2005-2471 be exploited remotely?
CVE-2005-2471 requires user-assisted actions, making it more difficult for remote exploitation.
5
What types of files are involved in CVE-2005-2471?
CVE-2005-2471 involves PostScript files being converted into PBM, PGM, or PNM file formats.