CVE-2008-0554

MEDIUM 6.8CVE-2008-0554 · Published 08/02/2008 · updated 16/06/2026

In short

CVE-2008-0554 is a MEDIUM (CVSS 6.8) vulnerability affecting netpbm (netpbm).
Chance of exploitation in the next 30 days (EPSS): 4.4%, higher than 91.3% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
netpbm netpbm	`≤ 10.26`	No fix yet

Description

Buffer overflow in the readImageData function in giftopnm.c in netpbm before 10.27 in netpbm before 10.27 allows remote user-assisted attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted GIF image, a similar issue to CVE-2006-4484.

References

bugs.debian.org/cgi-bin/bugreport.cgi
secunia.com/advisories/29079
secunia.com/advisories/30280
secunia.com/advisories/32607
ubuntu.com/usn/usn-665-1
debian.org/security/2008/dsa-1579
mandriva.com/security/advisories
redhat.com/support/errata/RHSA-2008-0131.html
securityfocus.com/bid/27682
securitytracker.com/id
vupen.com/english/advisories/2008/0460
issues.rpath.com/browse/RPL-2216
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10975

More vulnerabilities in netpbm

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free