PublicDate: 2008-02-08 02:00:00 UTC Candidate: CVE-2008-0554 References: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-0554 https://ubuntu.com/security/notices/USN-665-1 Description: Buffer overflow in the readImageData function in giftopnm.c in netpbm before 10.27 in netpbm before 10.27 allows remote user-assisted attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted GIF image, a similar issue to CVE-2006-4484. Ubuntu-Description: Notes: Bugs: https://bugs.launchpad.net/bugs/232156 Priority: medium Discovered-by: Assigned-to: mdeslaur CVSS: Patches_netpbm-free: vendor: https://rhn.redhat.com/errata/RHSA-2008-0131.html upstream_netpbm-free: released (2:10.0-11.1) dapper_netpbm-free: released (2:10.0-10ubuntu1.1) edgy_netpbm-free: needed (reached end-of-life) feisty_netpbm-free: needed (reached end-of-life) gutsy_netpbm-free: released (2:10.0-11ubuntu0.1) hardy_netpbm-free: not-affected (2:10.0-11.1) intrepid_netpbm-free: not-affected (2:10.0-11.1) devel_netpbm-free: not-affected (2:10.0-11.1)