CVE-2005-3662

MEDIUM 4.6CVE-2005-3662 · Published 18/11/2005 · updated 16/06/2026

In short

CVE-2005-3662 is a MEDIUM (CVSS 4.6) vulnerability affecting pnmtopng (greg roelofs).
Chance of exploitation in the next 30 days (EPSS): 0.60%, higher than 48.7% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
pnmtopng greg_roelofs	`= 2.37.3= 2.37.4= 2.37.5= 2.37.6= 2.38`	No fix yet

Description

Off-by-one buffer overflow in pnmtopng before 2.39, when using the -alpha command line option (Alphas_Of_Color), allows attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted PNM file with exactly 256 colors.

References

patches.sgi.com/support/free/security/advisories/20060101-01-U
secunia.com/advisories/17544 · Patch
secunia.com/advisories/17671 · Vendor Advisory
secunia.com/advisories/17679 · Vendor Advisory
secunia.com/advisories/17828 · Vendor Advisory
secunia.com/advisories/18186 · Vendor Advisory
secunia.com/advisories/18517 · Vendor Advisory
sourceforge.net/project/shownotes.php
debian.org/security/2005/dsa-904
mandriva.com/security/advisories
novell.com/linux/security/advisories/2005_28_sr.html
redhat.com/support/errata/RHSA-2005-843.html
securityfocus.com/bid/15427
vupen.com/english/advisories/2005/2418

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free