CVE-2008-4799
Summary
| CVE | CVE-2008-4799 |
|---|---|
| State | PUBLISHED |
| Assigner | mitre |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2008-10-31 00:00:00 UTC |
| Updated | 2026-04-23 00:35:47 UTC |
| Description | pamperspective in Netpbm before 10.35.48 does not properly calculate a window height, which allows context-dependent attackers to cause a denial of service (crash) via a crafted image file that triggers an out-of-bounds read. |
Risk And Classification
CVSS v2.0 Breakdown
Access Vector
NetworkAccess Complexity
MediumAuthentication
NoneConfidentiality
NoneIntegrity
NoneAvailability
PartialAV:N/AC:M/Au:N/C:N/I:N/A:P
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Netpbm | Netpbm | 10.0 | All | All | All |
| Application | Netpbm | Netpbm | 10.1 | All | All | All |
| Application | Netpbm | Netpbm | 10.10 | All | All | All |
| Application | Netpbm | Netpbm | 10.12 | All | All | All |
| Application | Netpbm | Netpbm | 10.13 | All | All | All |
| Application | Netpbm | Netpbm | 10.14 | All | All | All |
| Application | Netpbm | Netpbm | 10.15 | All | All | All |
| Application | Netpbm | Netpbm | 10.16 | All | All | All |
| Application | Netpbm | Netpbm | 10.17 | All | All | All |
| Application | Netpbm | Netpbm | 10.18 | All | All | All |
| Application | Netpbm | Netpbm | 10.19 | All | All | All |
| Application | Netpbm | Netpbm | 10.2 | All | All | All |
| Application | Netpbm | Netpbm | 10.20 | All | All | All |
| Application | Netpbm | Netpbm | 10.21 | All | All | All |
| Application | Netpbm | Netpbm | 10.22 | All | All | All |
| Application | Netpbm | Netpbm | 10.23 | All | All | All |
| Application | Netpbm | Netpbm | 10.24 | All | All | All |
| Application | Netpbm | Netpbm | 10.25 | All | All | All |
| Application | Netpbm | Netpbm | 10.26 | All | All | All |
| Application | Netpbm | Netpbm | 10.27 | All | All | All |
| Application | Netpbm | Netpbm | 10.28 | All | All | All |
| Application | Netpbm | Netpbm | 10.29 | All | All | All |
| Application | Netpbm | Netpbm | 10.3 | All | All | All |
| Application | Netpbm | Netpbm | 10.30 | All | All | All |
| Application | Netpbm | Netpbm | 10.31 | All | All | All |
| Application | Netpbm | Netpbm | 10.32 | All | All | All |
| Application | Netpbm | Netpbm | 10.33 | All | All | All |
| Application | Netpbm | Netpbm | 10.34 | All | All | All |
| Application | Netpbm | Netpbm | 10.35.00 | All | All | All |
| Application | Netpbm | Netpbm | 10.35.01 | All | All | All |
| Application | Netpbm | Netpbm | 10.35.02 | All | All | All |
| Application | Netpbm | Netpbm | 10.35.03 | All | All | All |
| Application | Netpbm | Netpbm | 10.35.04 | All | All | All |
| Application | Netpbm | Netpbm | 10.35.05 | All | All | All |
| Application | Netpbm | Netpbm | 10.35.06 | All | All | All |
| Application | Netpbm | Netpbm | 10.35.07 | All | All | All |
| Application | Netpbm | Netpbm | 10.35.08 | All | All | All |
| Application | Netpbm | Netpbm | 10.35.09 | All | All | All |
| Application | Netpbm | Netpbm | 10.35.10 | All | All | All |
| Application | Netpbm | Netpbm | 10.35.11 | All | All | All |
| Application | Netpbm | Netpbm | 10.35.12 | All | All | All |
| Application | Netpbm | Netpbm | 10.35.13 | All | All | All |
| Application | Netpbm | Netpbm | 10.35.14 | All | All | All |
| Application | Netpbm | Netpbm | 10.35.15 | All | All | All |
| Application | Netpbm | Netpbm | 10.35.16 | All | All | All |
| Application | Netpbm | Netpbm | 10.35.17 | All | All | All |
| Application | Netpbm | Netpbm | 10.35.18 | All | All | All |
| Application | Netpbm | Netpbm | 10.35.19 | All | All | All |
| Application | Netpbm | Netpbm | 10.35.20 | All | All | All |
| Application | Netpbm | Netpbm | 10.35.21 | All | All | All |
| Application | Netpbm | Netpbm | 10.35.22 | All | All | All |
| Application | Netpbm | Netpbm | 10.35.23 | All | All | All |
| Application | Netpbm | Netpbm | 10.35.24 | All | All | All |
| Application | Netpbm | Netpbm | 10.35.25 | All | All | All |
| Application | Netpbm | Netpbm | 10.35.26 | All | All | All |
| Application | Netpbm | Netpbm | 10.35.27 | All | All | All |
| Application | Netpbm | Netpbm | 10.35.28 | All | All | All |
| Application | Netpbm | Netpbm | 10.35.29 | All | All | All |
| Application | Netpbm | Netpbm | 10.35.30 | All | All | All |
| Application | Netpbm | Netpbm | 10.35.31 | All | All | All |
| Application | Netpbm | Netpbm | 10.35.32 | All | All | All |
| Application | Netpbm | Netpbm | 10.35.33 | All | All | All |
| Application | Netpbm | Netpbm | 10.35.34 | All | All | All |
| Application | Netpbm | Netpbm | 10.35.35 | All | All | All |
| Application | Netpbm | Netpbm | 10.35.36 | All | All | All |
| Application | Netpbm | Netpbm | 10.35.37 | All | All | All |
| Application | Netpbm | Netpbm | 10.35.38 | All | All | All |
| Application | Netpbm | Netpbm | 10.35.39 | All | All | All |
| Application | Netpbm | Netpbm | 10.35.40 | All | All | All |
| Application | Netpbm | Netpbm | 10.35.41 | All | All | All |
| Application | Netpbm | Netpbm | 10.35.42 | All | All | All |
| Application | Netpbm | Netpbm | 10.35.43 | All | All | All |
| Application | Netpbm | Netpbm | 10.35.44 | All | All | All |
| Application | Netpbm | Netpbm | 10.35.45 | All | All | All |
| Application | Netpbm | Netpbm | 10.35.46 | All | All | All |
| Application | Netpbm | Netpbm | 10.4 | All | All | All |
| Application | Netpbm | Netpbm | 10.5 | All | All | All |
| Application | Netpbm | Netpbm | 10.6 | All | All | All |
| Application | Netpbm | Netpbm | 10.7 | All | All | All |
| Application | Netpbm | Netpbm | 10.8 | All | All | All |
| Application | Netpbm | Netpbm | 10.9 | All | All | All |
| Application | Netpbm | Netpbm | 8.1 | All | All | All |
| Application | Netpbm | Netpbm | 8.2 | All | All | All |
| Application | Netpbm | Netpbm | 8.3 | All | All | All |
| Application | Netpbm | Netpbm | 8.4 | All | All | All |
| Application | Netpbm | Netpbm | 9.0 | All | All | All |
| Application | Netpbm | Netpbm | 9.1 | All | All | All |
| Application | Netpbm | Netpbm | 9.10 | All | All | All |
| Application | Netpbm | Netpbm | 9.11 | All | All | All |
| Application | Netpbm | Netpbm | 9.12 | All | All | All |
| Application | Netpbm | Netpbm | 9.13 | All | All | All |
| Application | Netpbm | Netpbm | 9.14 | All | All | All |
| Application | Netpbm | Netpbm | 9.15 | All | All | All |
| Application | Netpbm | Netpbm | 9.16 | All | All | All |
| Application | Netpbm | Netpbm | 9.17 | All | All | All |
| Application | Netpbm | Netpbm | 9.18 | All | All | All |
| Application | Netpbm | Netpbm | 9.19 | All | All | All |
| Application | Netpbm | Netpbm | 9.2 | All | All | All |
| Application | Netpbm | Netpbm | 9.20 | All | All | All |
| Application | Netpbm | Netpbm | 9.21 | All | All | All |
| Application | Netpbm | Netpbm | 9.22 | All | All | All |
| Application | Netpbm | Netpbm | 9.23 | All | All | All |
| Application | Netpbm | Netpbm | 9.24 | All | All | All |
| Application | Netpbm | Netpbm | 9.25 | All | All | All |
| Application | Netpbm | Netpbm | 9.3 | All | All | All |
| Application | Netpbm | Netpbm | 9.4 | All | All | All |
| Application | Netpbm | Netpbm | 9.5 | All | All | All |
| Application | Netpbm | Netpbm | 9.6 | All | All | All |
| Application | Netpbm | Netpbm | 9.7 | All | All | All |
| Application | Netpbm | Netpbm | 9.8 | All | All | All |
| Application | Netpbm | Netpbm | 9.9 | All | All | All |
| Application | Netpbm | Netpbm | All | All | All | All |
Vendor Declared Affected Products
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| Netpbm 'pamperspective' Utility Buffer Overflow Vulnerability | af854a3a-2127-422b-91ae-364da2661108 | www.securityfocus.com | |
| IBM X-Force Exchange | af854a3a-2127-422b-91ae-364da2661108 | exchange.xforce.ibmcloud.com | |
| Fedora 9 Update: netpbm-10.35.48-1.fc9 | af854a3a-2127-422b-91ae-364da2661108 | www.redhat.com | |
| oss-security - CVE Request (netpbm) | af854a3a-2127-422b-91ae-364da2661108 | www.openwall.com | |
| 404 Not Found | af854a3a-2127-422b-91ae-364da2661108 | netpbm.svn.sourceforge.net | |
| Fedora 8 Update: netpbm-10.35.48-1.fc8 | af854a3a-2127-422b-91ae-364da2661108 | www.redhat.com | |
| oss-security - Re: CVE Request (netpbm) | af854a3a-2127-422b-91ae-364da2661108 | www.openwall.com | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
Vendor Comments And Credit
| Organization | Published | Contributor | Statement |
|---|---|---|---|
| Red Hat | 2008-10-31 | Tomas Hoger | This issue can only cause pamperspective to crash when used on specially crafted messages. We do not consider this to be a security issue. |
There are currently no legacy QID mappings associated with this CVE.