REDHAT-BUG-431525: Buffer Overflow
GIF handling code used in netpbm's giftopnm converter is based on the same code as used by gd and SDLimage and is affected by the overflow known as CVE-2006-4484 and CVE-2007-6697.
readImageData function in giftopnm.c does not properly check the value of lzwMinCodeSize value read from GIF image before passing it to lzwInit, which uses it as upper bound during the initialization of fixed sized table array, leading to a buffer overflow.
This issue was fixed in upstream version 10.27. Code checking the value is in the initial giftopnm.c revision in projects public SVN repository:
http://netpbm.svn.sourceforge.net/viewvc/netpbm/trunk/converter/other/giftopnm.c?revision=1&view=markup#l1052
This issue does not affect netpbm packages as shipped in Red Hat Enterprise Linux 5 and current versions of Fedora, as those packages are based on fixed upstream version.
Related issues: CVE-2006-4484 (gd), CVE-2007-6697 (SDLimage), CVE-2008-0553 (tk)
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-431525?
The severity of REDHAT-BUG-431525 is classified as high due to potential remote code execution.
How do I fix REDHAT-BUG-431525?
To fix REDHAT-BUG-431525, update to version 10.27 or later of the Netpbm giftopnm software.
What are the impacts of REDHAT-BUG-431525?
The impacts of REDHAT-BUG-431525 include potential security vulnerabilities that could be exploited to execute arbitrary code.
Which versions of Netpbm giftopnm are affected by REDHAT-BUG-431525?
Netpbm giftopnm versions prior to 10.27 are affected by REDHAT-BUG-431525.
What underlying issues contribute to REDHAT-BUG-431525?
REDHAT-BUG-431525 is influenced by overflow vulnerabilities referenced in CVE-2006-4484 and CVE-2007-6697.