CVE-2008-4799: Medium severity netpbm vulnerability

Q: What is the severity of CVE-2008-4799?

CVE-2008-4799 has a severity rating that indicates a denial of service vulnerability due to out-of-bounds read when processing crafted image files.

Q: How do I fix CVE-2008-4799?

To fix CVE-2008-4799, update Netpbm to version 10.35.48 or later.

Q: Which software versions are affected by CVE-2008-4799?

CVE-2008-4799 affects Netpbm versions prior to 10.35.48, including various versions from 8.1 to 10.35.47.

Q: What kind of attacks can exploit CVE-2008-4799?

CVE-2008-4799 can be exploited through crafted image files that lead to a denial of service condition.

Q: What are the consequences of CVE-2008-4799 exploitation?

Exploitation of CVE-2008-4799 can result in a crash of the Netpbm application, leading to service interruptions.

Published Oct 30, 2008

Updated

pamperspective in Netpbm before 10.35.48 does not properly calculate a window height, which allows context-dependent attackers to cause a denial of service (crash) via a crafted image file that triggers an out-of-bounds read.

Affected Software

112 affected components

Netpbm netpbm=10.35.13

Netpbm netpbm=10.28

Netpbm netpbm=10.0

Netpbm netpbm=9.4

Netpbm netpbm=10.35.44

Netpbm netpbm=10.35.11

Netpbm netpbm=10.35.32

Netpbm netpbm=10.35.20

Netpbm netpbm=10.33

Netpbm netpbm=9.16

Netpbm netpbm=10.35.35

Netpbm netpbm=10.35.39

Netpbm netpbm=10.7

Netpbm netpbm=10.13

Netpbm netpbm=9.21

Netpbm netpbm=9.12

Netpbm netpbm=9.6

Netpbm netpbm=10.35.18

Netpbm netpbm=10.35.06

Netpbm netpbm=9.22

Netpbm netpbm=10.35.08

Netpbm netpbm=10.35.19

Netpbm netpbm=9.17

Netpbm netpbm=10.26

Netpbm netpbm=9.0

Netpbm netpbm=10.35.00

Netpbm netpbm=10.35.33

Netpbm netpbm=10.12

Netpbm netpbm=10.35.22

Netpbm netpbm=10.35.28

Netpbm netpbm=9.7

Netpbm netpbm=10.17

Netpbm netpbm=10.35.15

Netpbm netpbm=10.35.29

Netpbm netpbm=9.9

Netpbm netpbm=10.35.16

Netpbm netpbm=10.8

Netpbm netpbm=10.2

Netpbm netpbm=10.1

Netpbm netpbm=10.19

Netpbm netpbm=10.35.36

Netpbm netpbm=10.32

Netpbm netpbm=10.35.03

Netpbm netpbm=10.35.40

Netpbm netpbm=10.35.43

Netpbm netpbm=10.35.23

Netpbm netpbm=10.35.30

Netpbm netpbm=9.5

Netpbm netpbm=10.35.38

Netpbm netpbm=10.35.09

Netpbm netpbm=10.3

Netpbm netpbm=10.22

Netpbm netpbm=10.35.41

Netpbm netpbm=10.35.10

Netpbm netpbm=9.14

Netpbm netpbm=10.6

Netpbm netpbm=8.1

Netpbm netpbm=9.2

Netpbm netpbm=10.31

Netpbm netpbm=10.35.17

Netpbm netpbm=10.29

Netpbm netpbm=10.35.12

Netpbm netpbm=9.18

Netpbm netpbm=10.9

Netpbm netpbm=8.3

Netpbm netpbm=9.10

Netpbm netpbm=9.1

Netpbm netpbm=9.25

Netpbm netpbm=10.20

Netpbm netpbm=9.15

Netpbm netpbm=9.19

Netpbm netpbm=10.27

Netpbm netpbm=10.25

Netpbm netpbm=10.18

Netpbm netpbm=10.23

Netpbm netpbm=9.23

Netpbm netpbm=10.35.05

Netpbm netpbm=10.35.27

Netpbm netpbm=9.20

Netpbm netpbm<=10.35.47

Netpbm netpbm=10.10

Netpbm netpbm=10.35.46

Netpbm netpbm=10.16

Netpbm netpbm=10.35.45

Netpbm netpbm=10.35.07

Netpbm netpbm=10.35.25

Netpbm netpbm=8.4

Netpbm netpbm=10.30

Netpbm netpbm=10.35.31

Netpbm netpbm=10.35.34

Netpbm netpbm=9.3

Netpbm netpbm=10.34

Netpbm netpbm=9.13

Netpbm netpbm=10.21

Netpbm netpbm=10.14

Netpbm netpbm=10.5

Netpbm netpbm=10.35.02

Netpbm netpbm=9.8

Netpbm netpbm=10.35.24

Netpbm netpbm=10.4

Netpbm netpbm=9.11

Netpbm netpbm=8.2

Netpbm netpbm=10.35.04

Netpbm netpbm=10.24

Netpbm netpbm=10.35.14

Netpbm netpbm=10.35.37

Netpbm netpbm=10.15

Netpbm netpbm=10.35.21

Netpbm netpbm=10.35.26

Netpbm netpbm=9.24

Netpbm netpbm=10.35.01

Netpbm netpbm=10.35.42

Event History

Oct 30, 2008

CVE Published

via MITRE·10:00 PM

Data Sourced

via MITRE·10:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2008-4799?

CVE-2008-4799 has a severity rating that indicates a denial of service vulnerability due to out-of-bounds read when processing crafted image files.

How do I fix CVE-2008-4799?

To fix CVE-2008-4799, update Netpbm to version 10.35.48 or later.

Which software versions are affected by CVE-2008-4799?