CVE-2009-4274: Buffer Overflow
Marc Schoenefeld found a stack-based buffer overflow in the way netpbm graphics file formats handling library used to process content of header fields of the X PixMap (XPM) image file. A remote attacker could provide a specially-crafted XPM image file and trick the local user into processing it, which would lead to denial of service (crash of application using the netpbm library) or, potentially, to execution of arbitrary code with the privileges of that application.
Other sources
Stack-based buffer overflow in converter/ppm/xpmtoppm.c in netpbm before 10.47.07 allows context-dependent attackers to cause a denial of service (application crash) or possibly execute arbitrary code via an XPM image file that contains a crafted header field associated with a large color index value.
— Red Hat
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2009-4274?
CVE-2009-4274 has a severity rating that may allow attackers to cause denial of service or potentially execute arbitrary code.
How do I fix CVE-2009-4274?
To fix CVE-2009-4274, update to a version of netpbm that is 10.47.07 or later.
Which software versions are affected by CVE-2009-4274?
CVE-2009-4274 affects netpbm versions prior to 10.47.07.
What type of vulnerability is CVE-2009-4274?
CVE-2009-4274 is a stack-based buffer overflow vulnerability.
Can CVE-2009-4274 lead to application crashes?
Yes, CVE-2009-4274 can cause application crashes due to its buffer overflow nature.