CVE-2006-3145: Buffer Overflow
Published Jun 22, 2006
·Updated
Buffer overflow in pamtofits of NetPBM 10.30 through 10.33 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code when assembling the header, possibly related to an off-by-one error.
Affected Software
4 affected components
Netpbm netpbm=10.33
Netpbm netpbm=10.32
Netpbm netpbm=10.31
Netpbm netpbm=10.30
Remediation
Patch Available
Patch Available
Event History
Jun 22, 2006
CVE Published
10:06 PM
Jun 23, 2006
CVE Published
via MITRE·02:00 AM
Data Sourced
via MITRE·02:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2006-3145?
CVE-2006-3145 has a high severity due to potential exploitation leading to denial of service and arbitrary code execution.
2
How do I fix CVE-2006-3145?
To fix CVE-2006-3145, upgrade NetPBM to version 10.34 or later.
3
What software is affected by CVE-2006-3145?
CVE-2006-3145 affects NetPBM versions 10.30 through 10.33.
4
Can CVE-2006-3145 be exploited remotely?
Yes, CVE-2006-3145 can be exploited remotely, allowing attackers to crash the software or execute code.
5
What are the possible consequences of CVE-2006-3145?
The possible consequences of CVE-2006-3145 include denial of service and the potential for arbitrary code execution.