CVE-2009-4274
Published Feb 12, 2010
Last updated 2 years ago
Overview
- Description
- Stack-based buffer overflow in converter/ppm/xpmtoppm.c in netpbm before 10.47.07 allows context-dependent attackers to cause a denial of service (application crash) or possibly execute arbitrary code via an XPM image file that contains a crafted header field associated with a large color index value.
- Source
- secalert@redhat.com
- NVD status
- Modified
Risk scores
CVSS 2.0
- Type
- Primary
- Base score
- 7.5
- Impact score
- 6.4
- Exploitability score
- 10
- Vector string
- AV:N/AC:L/Au:N/C:P/I:P/A:P
Weaknesses
- nvd@nist.gov
- CWE-119
Social media
- Hype score
- Not currently trending
Vendor comments
- Red HatRed Hat is aware of this issue and is tracking it via the following bug: https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2009-4274 The Red Hat Security Response Team has rated this issue as having moderate security impact, a future update may address this flaw. More information regarding issue severity can be found here: http://www.redhat.com/security/updates/classification/
Configurations
[ { "nodes": [ { "negate": false, "cpeMatch": [ { "criteria": "cpe:2.3:a:netpbm:netpbm:10.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F79F02C3-950F-4D47-971A-3C1367F1642C" }, { "criteria": "cpe:2.3:a:netpbm:netpbm:10.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0344253A-AF59-499B-81DF-5494A34B115F" }, { "criteria": "cpe:2.3:a:netpbm:netpbm:10.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E7297482-7D30-484A-8F8D-AFEA2E468725" }, { "criteria": "cpe:2.3:a:netpbm:netpbm:10.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "93BA3D19-C291-468E-9E4E-E8374AE1BD32" }, { "criteria": "cpe:2.3:a:netpbm:netpbm:10.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "85CF9240-FAEE-4BA2-8374-8B81F738521A" }, { "criteria": "cpe:2.3:a:netpbm:netpbm:10.5:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "45457716-9219-4A88-A824-B45FA16643D2" }, { "criteria": "cpe:2.3:a:netpbm:netpbm:10.6:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "93A0526D-918E-4FAE-90AF-2BA49F9D5276" }, { "criteria": "cpe:2.3:a:netpbm:netpbm:10.7:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7AD350ED-1327-483A-BF73-02AB9924EDED" }, { "criteria": "cpe:2.3:a:netpbm:netpbm:10.8:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "98C11849-BCD4-4982-A779-435669BD668F" }, { "criteria": "cpe:2.3:a:netpbm:netpbm:10.9:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C94984E9-22EE-4B24-AFCB-52137A871117" }, { "criteria": "cpe:2.3:a:netpbm:netpbm:10.10:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "23B10069-89E1-4E63-BCFF-C210CE3C5655" }, { "criteria": "cpe:2.3:a:netpbm:netpbm:10.11:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "EC42B061-EB8E-49B4-B041-42B31672C42D" }, { "criteria": "cpe:2.3:a:netpbm:netpbm:10.12:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "DFAE142A-4F71-4452-8DAD-9D6BA11EBF4C" }, { "criteria": "cpe:2.3:a:netpbm:netpbm:10.13:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "179366EE-D637-4345-8759-81D5E12EFFA8" }, { "criteria": "cpe:2.3:a:netpbm:netpbm:10.14:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "725CFC44-43C8-47FF-9935-FA006B6338FE" }, { "criteria": "cpe:2.3:a:netpbm:netpbm:10.15:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3A331F93-08C2-4F45-98AD-46DBE38A9785" }, { "criteria": "cpe:2.3:a:netpbm:netpbm:10.16:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "FEFB0157-CF91-4FCB-8786-4024595B3EE1" }, { "criteria": "cpe:2.3:a:netpbm:netpbm:10.17:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "92045C29-20B4-46D0-9643-491BB0642D12" }, { "criteria": "cpe:2.3:a:netpbm:netpbm:10.18:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "148A51ED-1A00-45D3-934E-96CA2759F5A8" }, { "criteria": "cpe:2.3:a:netpbm:netpbm:10.19:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "77BE0692-E688-4438-98C7-FA1FCE05F41C" }, { "criteria": "cpe:2.3:a:netpbm:netpbm:10.20:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1904CB89-F576-4DFF-9639-9263D0ADE0B2" }, { "criteria": "cpe:2.3:a:netpbm:netpbm:10.21:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "50D11F39-3B4F-43E4-AC5E-E1B5931BCBB1" }, { "criteria": "cpe:2.3:a:netpbm:netpbm:10.22:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "97023E9B-520D-4E6F-BA7F-052BA89BF2E1" }, { "criteria": "cpe:2.3:a:netpbm:netpbm:10.23:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "93A152B4-8483-4874-88C0-4679831BB60E" }, { "criteria": "cpe:2.3:a:netpbm:netpbm:10.24:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9BBAE4A7-B0E1-4E50-8775-CAEF3E49B7EB" }, { "criteria": "cpe:2.3:a:netpbm:netpbm:10.25:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "CDE78BA1-4001-4676-8BCB-FBC081A5D733" }, { "criteria": "cpe:2.3:a:netpbm:netpbm:10.26:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "FF606C17-AD8A-4D81-AB55-50B0C4B7763F" }, { "criteria": "cpe:2.3:a:netpbm:netpbm:10.27:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "906047FD-1D75-4F97-977D-2A22A1DC87B6" }, { "criteria": "cpe:2.3:a:netpbm:netpbm:10.28:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2DA92693-6629-4A8D-9C54-418569C852F3" }, { "criteria": "cpe:2.3:a:netpbm:netpbm:10.29:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F078E1C6-3FB7-415B-A49A-455BE55148B2" }, { "criteria": "cpe:2.3:a:netpbm:netpbm:10.30:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9F97984A-04F4-4F69-B03B-D06FD0F21EE6" }, { "criteria": "cpe:2.3:a:netpbm:netpbm:10.31:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "53FB010A-9B82-41F9-9DDB-4DCC0BFA0365" }, { "criteria": "cpe:2.3:a:netpbm:netpbm:10.32:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "07292430-0952-4E40-9012-1DD5709D2F9A" }, { "criteria": "cpe:2.3:a:netpbm:netpbm:10.33:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "019C4B30-4F04-4068-80B1-884F9607EC3A" }, { "criteria": "cpe:2.3:a:netpbm:netpbm:10.34:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F74038FE-C361-415B-AC47-744D3792E707" }, { "criteria": "cpe:2.3:a:netpbm:netpbm:10.35.00:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7A6B8C20-2603-4BC6-A9C5-363E45B86492" }, { "criteria": "cpe:2.3:a:netpbm:netpbm:10.35.01:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "16998237-B53D-4E6C-B2E7-3C17BE483780" }, { "criteria": "cpe:2.3:a:netpbm:netpbm:10.35.02:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4998E602-7E72-4ED9-806F-2DF117827F24" }, { "criteria": "cpe:2.3:a:netpbm:netpbm:10.35.03:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5A01D9E5-14BD-416D-8363-278FBA991BE1" }, { "criteria": "cpe:2.3:a:netpbm:netpbm:10.35.04:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "59B55BD5-0E1C-4A13-965C-BAFBE480C384" }, { "criteria": "cpe:2.3:a:netpbm:netpbm:10.35.05:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "EC498C66-4E32-4E4B-9BB0-3943CB963BC8" }, { "criteria": "cpe:2.3:a:netpbm:netpbm:10.35.06:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "FF4F989C-B9AF-4A0D-A39E-A9405E38229F" }, { "criteria": "cpe:2.3:a:netpbm:netpbm:10.35.07:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1FCC7D4D-09B1-4063-9FE8-F88032B91FA9" }, { "criteria": "cpe:2.3:a:netpbm:netpbm:10.35.08:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "BEF8AB55-8A95-47CD-960A-E9A920632B51" }, { "criteria": "cpe:2.3:a:netpbm:netpbm:10.35.09:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "FB45C9DA-9503-4F5C-8079-0C47E778EAB0" }, { "criteria": "cpe:2.3:a:netpbm:netpbm:10.35.10:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3B1D6ABC-D56F-4484-90D0-45CD3E7B682C" }, { "criteria": "cpe:2.3:a:netpbm:netpbm:10.35.11:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B48121BF-EDA1-4EAD-B24B-7BAF6668D4BB" }, { "criteria": "cpe:2.3:a:netpbm:netpbm:10.35.12:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9E079966-8423-4638-8A55-BC9F2412D4E2" }, { "criteria": "cpe:2.3:a:netpbm:netpbm:10.35.13:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0BE5E653-3B78-4DCE-9FE8-1126FC18D8B5" }, { "criteria": "cpe:2.3:a:netpbm:netpbm:10.35.14:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D339F6D7-9E9A-46C2-9823-E534F3BEBDC4" }, { "criteria": "cpe:2.3:a:netpbm:netpbm:10.35.15:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A829E428-77AA-4B8F-B4E6-BB89F0054F20" }, { "criteria": "cpe:2.3:a:netpbm:netpbm:10.35.16:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A6470755-BE74-49FB-B4C7-6869FB33A096" }, { "criteria": "cpe:2.3:a:netpbm:netpbm:10.35.17:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7FEFA0BB-1542-4A88-BC95-A60AAEF90D5C" }, { "criteria": "cpe:2.3:a:netpbm:netpbm:10.35.18:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "090C90E2-D688-44C2-88D7-E40F7D919FA8" }, { "criteria": "cpe:2.3:a:netpbm:netpbm:10.35.19:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "675512A2-6E2A-46BA-9237-114B4EA6248F" }, { "criteria": "cpe:2.3:a:netpbm:netpbm:10.35.20:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "185FF47F-321E-4D26-893D-BB4F4B532670" }, { "criteria": "cpe:2.3:a:netpbm:netpbm:10.35.21:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B402DB46-6103-4428-B6BF-9263D9270EE0" }, { "criteria": "cpe:2.3:a:netpbm:netpbm:10.35.22:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "599D4BAC-1266-4A30-A4C5-4BA13EC47F62" }, { "criteria": "cpe:2.3:a:netpbm:netpbm:10.35.23:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "23241E2B-21B9-4C97-B865-5C3652C27401" }, { "criteria": "cpe:2.3:a:netpbm:netpbm:10.35.24:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B4A40DC0-AE35-4597-8A55-D5022289435E" }, { "criteria": "cpe:2.3:a:netpbm:netpbm:10.35.25:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C12B85A1-5607-4037-A362-0270EF710514" }, { "criteria": "cpe:2.3:a:netpbm:netpbm:10.35.26:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "03B39A1A-DC18-413E-A869-9D6C7C77BF8B" }, { "criteria": "cpe:2.3:a:netpbm:netpbm:10.35.27:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4F62F30D-F8D9-4B47-9CFC-8F54B3F589C5" }, { "criteria": "cpe:2.3:a:netpbm:netpbm:10.35.28:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "89B0ACB2-FE13-4145-8EAE-9D6FB7FEDD60" }, { "criteria": "cpe:2.3:a:netpbm:netpbm:10.35.29:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0253F8B8-346C-40F0-9225-4593EAF39861" }, { "criteria": "cpe:2.3:a:netpbm:netpbm:10.35.30:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2411D682-BEB2-41E0-B211-4E8EA0E551C9" }, { "criteria": "cpe:2.3:a:netpbm:netpbm:10.35.31:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "97036446-8A06-4AB6-842B-2186A88FBB1A" }, { "criteria": "cpe:2.3:a:netpbm:netpbm:10.35.32:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "FC9F56AC-906E-4713-83ED-79A8673F59BA" }, { "criteria": "cpe:2.3:a:netpbm:netpbm:10.35.33:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A77A17C7-C323-4182-A099-BB3E92BF12D0" }, { "criteria": "cpe:2.3:a:netpbm:netpbm:10.35.34:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "82DB51EA-A050-417A-8603-97BD33ACB9B3" }, { "criteria": "cpe:2.3:a:netpbm:netpbm:10.35.35:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "48468D84-76E9-476D-8470-3950C8281118" }, { "criteria": "cpe:2.3:a:netpbm:netpbm:10.35.36:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7472AD57-68B3-43BE-95D4-F21D39708A4B" }, { "criteria": "cpe:2.3:a:netpbm:netpbm:10.35.37:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "DAA0C21F-DB95-43D9-B7B2-B076043828E6" }, { "criteria": "cpe:2.3:a:netpbm:netpbm:10.35.38:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3658F6EA-E897-4A24-AD82-F3EBD4567D27" }, { "criteria": "cpe:2.3:a:netpbm:netpbm:10.35.39:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F887C654-43D9-4374-88D8-DCA800B7F449" }, { "criteria": "cpe:2.3:a:netpbm:netpbm:10.35.40:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "34001491-58AD-4F6C-9159-C27671EA1574" }, { "criteria": "cpe:2.3:a:netpbm:netpbm:10.35.41:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "347D3197-1915-4417-B72D-0C23BEFBAA32" }, { "criteria": "cpe:2.3:a:netpbm:netpbm:10.35.42:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0256E7B3-E119-41A4-B49D-4C08D364C22C" }, { "criteria": "cpe:2.3:a:netpbm:netpbm:10.35.43:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2EA3DD4D-28E0-4266-9024-A4DFF832512E" }, { "criteria": "cpe:2.3:a:netpbm:netpbm:10.35.44:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "02FAFCFB-0D3F-4906-ADCE-BF7F06167692" }, { "criteria": "cpe:2.3:a:netpbm:netpbm:10.35.45:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "EB184F25-C4ED-4655-B79D-6B00E22F9097" }, { "criteria": "cpe:2.3:a:netpbm:netpbm:10.35.46:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "43FC34D4-576B-46D6-B13C-EE17C0A5AAE9" }, { "criteria": "cpe:2.3:a:netpbm:netpbm:10.35.47:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0618AF8A-0927-45CC-8BF5-93B1083B8147" }, { "criteria": "cpe:2.3:a:netpbm:netpbm:10.36.00:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4A715086-7459-4E99-8936-49F77323D17C" }, { "criteria": "cpe:2.3:a:netpbm:netpbm:10.37.00:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "979690E7-827E-4131-A3CD-235340A2FC2B" }, { "criteria": "cpe:2.3:a:netpbm:netpbm:10.38.00:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "AD21B69B-5500-4130-9603-F46998AC7D96" }, { "criteria": "cpe:2.3:a:netpbm:netpbm:10.39.00:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0E222667-1825-4377-AD6E-5C88979CD5A6" }, { "criteria": "cpe:2.3:a:netpbm:netpbm:10.40.00:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "AFA2DCC3-007C-4EA4-BD2B-18C776D3CBAD" }, { "criteria": "cpe:2.3:a:netpbm:netpbm:10.41.00:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B5A9A4DD-FCE5-4585-97A5-F91120F9F2D2" }, { "criteria": "cpe:2.3:a:netpbm:netpbm:10.42.00:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9A8E6AAC-2DFD-4E6F-BAFA-FC002E7FBF78" }, { "criteria": "cpe:2.3:a:netpbm:netpbm:10.43.00:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9C739F6A-7DA4-4069-827D-B78DA08E4C12" }, { "criteria": "cpe:2.3:a:netpbm:netpbm:10.44.00:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "04BE3C40-8066-4C41-A566-F89236D5F112" }, { "criteria": "cpe:2.3:a:netpbm:netpbm:10.45.00:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A66AB52D-ECF8-4D0E-906F-7FA1AC41CD84" }, { "criteria": "cpe:2.3:a:netpbm:netpbm:10.46.00:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C11B4771-81FF-4FA4-AB56-0BD51AFF10D7" }, { "criteria": "cpe:2.3:a:netpbm:netpbm:10.47.00:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B15E831F-F5FB-487F-9359-A7188C2206BD" }, { "criteria": "cpe:2.3:a:netpbm:netpbm:10.47.01:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "756FB7A1-2FD3-40A6-B992-5D5FF0E6A736" }, { "criteria": "cpe:2.3:a:netpbm:netpbm:10.47.02:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "51CEA68F-46F0-4795-9839-D961FC1A394F" }, { "criteria": "cpe:2.3:a:netpbm:netpbm:10.47.03:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0A6F7C0A-FF13-4C64-B9D3-5E71FCF87813" }, { "criteria": "cpe:2.3:a:netpbm:netpbm:10.47.04:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B20DFC28-0489-404A-8783-DCA6157EACCB" }, { "criteria": "cpe:2.3:a:netpbm:netpbm:10.47.05:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "533419D8-A51D-4C51-A898-7E9068722FD5" }, { "criteria": "cpe:2.3:a:netpbm:netpbm:10.47.06:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E141EBC6-830D-4ADD-8D03-DB528FF3E117" } ], "operator": "OR" } ] } ]