Back to Database
Status published
Medium
CVE-2008-4799
pamperspective in Netpbm before 10.35.48 does not properly calculate a...
Vulnerability Description
pamperspective in Netpbm before 10.35.48 does not properly calculate a window height, which allows context-dependent attackers to cause a denial of service (crash) via a crafted image file that triggers an out-of-bounds read.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2008-4799
Credits & Attribution
No credits recorded in the NVD database.
References
- http://www.securityfocus.com/bid/31871
- http://www.openwall.com/lists/oss-security/2008/10/23/2
- http://netpbm.svn.sourceforge.net/viewvc/netpbm/stable/doc/HISTORY
- https://www.redhat.com/archives/fedora-package-announce/2008-August/msg00069.html
- http://www.openwall.com/lists/oss-security/2008/10/22/7
- https://www.redhat.com/archives/fedora-package-announce/2008-August/msg00058.html
- https://exchange.xforce.ibmcloud.com/vulnerabilities/46054
More from netpbm
View All →CVE-2009-4274
Stack-based buffer overflow in converter/ppm/xpmtoppm.c in netpbm before 10.47.07 allows...
High
7.5
CVE-2008-0554
Buffer overflow in the readImageData function in giftopnm.c in netpbm...
Medium
6.8
CVE-2006-3145
Buffer overflow in pamtofits of NetPBM 10.30 through 10.33 allows...
Medium
5
CVE-2005-3632
Multiple buffer overflows in pnmtopng in netpbm 10.0 and earlier...
Medium
4.6
CVE-2005-2978
pnmtopng in netpbm before 10.25, when using the -trans option,...
High
7.5
Affected Vendor
netpbm
View all reports →Affected Software
netpbm
Vulnerable Versions:
0, 8.1, 8.2, 8.3, 8.4, 9.0, 9.1, 9.2, 9.3, 9.4, 9.5, 9.6, 9.7, 9.8, 9.9, 9.10, 9.11, 9.12, 9.13, 9.14, 9.15, 9.16, 9.17, 9.18, 9.19, 9.20, 9.21, 9.22, 9.23, 9.24, 9.25, 10.0, 10.1, 10.2, 10.3, 10.4, 10.5, 10.6, 10.7, 10.8, 10.9, 10.10, 10.12, 10.13, 10.14, 10.15, 10.16, 10.17, 10.18, 10.19, 10.20, 10.21, 10.22, 10.23, 10.24, 10.25, 10.26, 10.27, 10.28, 10.29, 10.30, 10.31, 10.32, 10.33, 10.34, 10.35.00, 10.35.01, 10.35.02, 10.35.03, 10.35.04, 10.35.05, 10.35.06, 10.35.07, 10.35.08, 10.35.09, 10.35.10, 10.35.11, 10.35.12, 10.35.13, 10.35.14, 10.35.15, 10.35.16, 10.35.17, 10.35.18, 10.35.19, 10.35.20, 10.35.21, 10.35.22, 10.35.23, 10.35.24, 10.35.25, 10.35.26, 10.35.27, 10.35.28, 10.35.29, 10.35.30, 10.35.31, 10.35.32, 10.35.33, 10.35.34, 10.35.35, 10.35.36, 10.35.37, 10.35.38, 10.35.39, 10.35.40, 10.35.41, 10.35.42, 10.35.43, 10.35.44, 10.35.45, 10.35.46
Timeline
Official Publish:
October 30th, 2008
Last Modified:
August 7th, 2024
Added to House:
July 18th, 2026
CVSS Vectors
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.