| Package | Affected versions | Patched versions |
|---|---|---|
| pnmtopng | = 2.37.3= 2.37.4= 2.37.5= 2.37.6= 2.38 |
Off-by-one buffer overflow in pnmtopng before 2.39, when using the -alpha command line option (Alphas_Of_Color), allows attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted PNM file with exactly 256 colors.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free