{"api_version":"1","generated_at":"2026-07-23T08:12:49+00:00","cve":"CVE-2009-4274","urls":{"html":"https://cve.report/CVE-2009-4274","api":"https://cve.report/api/cve/CVE-2009-4274.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2009-4274","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2009-4274"},"summary":{"title":"CVE-2009-4274","description":"Stack-based buffer overflow in converter/ppm/xpmtoppm.c in netpbm before 10.47.07 allows context-dependent attackers to cause a denial of service (application crash) or possibly execute arbitrary code via an XPM image file that contains a crafted header field associated with a large color index value.","state":"PUBLISHED","assigner":"redhat","published_at":"2010-02-12 21:30:00","updated_at":"2026-04-29 01:13:23"},"problem_types":["CWE-119","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"7.5","severity":"","vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","data":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"}}],"references":[{"url":"http://www.vupen.com/english/advisories/2010/0780","name":"http://www.vupen.com/english/advisories/2010/0780","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Webmail - OVH","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.debian.org/security/2010/dsa-2026","name":"http://www.debian.org/security/2010/dsa-2026","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Debian -- Security Information -- DSA-2026-1 netpbm-free","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://netpbm.svn.sourceforge.net/viewvc/netpbm/stable/doc/HISTORY?view=markup","name":"http://netpbm.svn.sourceforge.net/viewvc/netpbm/stable/doc/HISTORY?view=markup","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"404 Not Found","mime":"text/html","httpstatus":"404","archivestatus":"404"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-03/msg00004.html","name":"http://lists.opensuse.org/opensuse-security-announce/2010-03/msg00004.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"[security-announce] SUSE Security Summary Report: SUSE-SR:2010:006","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.openwall.com/lists/oss-security/2010/02/09/11","name":"http://www.openwall.com/lists/oss-security/2010/02/09/11","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"oss-security - vulnerability in netpbm (CVE-2009-4274)","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securityfocus.com/bid/38164","name":"http://www.securityfocus.com/bid/38164","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Netpbm XPM File Remote Stack Buffer Overflow Vulnerability","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"http://netpbm.svn.sourceforge.net/viewvc/netpbm/stable/converter/ppm/xpmtoppm.c?view=patch&r1=995&r2=1076&pathrev=1076","name":"http://netpbm.svn.sourceforge.net/viewvc/netpbm/stable/converter/ppm/xpmtoppm.c?view=patch&r1=995&r2=1076&pathrev=1076","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Netpbm - graphics tools and converters / Code\n    / [r2250]","mime":"text/html","httpstatus":"404","archivestatus":"200"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:039","name":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:039","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Support / Security / Advisories /  / MDVSA-2010:039 | Mandriva","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.redhat.com/support/errata/RHSA-2011-1811.html","name":"http://www.redhat.com/support/errata/RHSA-2011-1811.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Support","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/38530","name":"http://secunia.com/advisories/38530","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"NetPBM \"xpmtoppm\" XPM Processing Vulnerability - Advisories - Community","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/38915","name":"http://secunia.com/advisories/38915","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"SUSE Update for Multiple Packages - Advisories - Community","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/56207","name":"https://exchange.xforce.ibmcloud.com/vulnerabilities/56207","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"IBM X-Force Exchange","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.vupen.com/english/advisories/2010/0358","name":"http://www.vupen.com/english/advisories/2010/0358","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"Webmail : Solution de messagerie professionnelle - OVHcloud- OVH","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=546580","name":"https://bugzilla.redhat.com/show_bug.cgi?id=546580","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Bug 546580 – CVE-2009-4274 netpbm: Stack-based buffer overflow by processing X PixMap image header fields","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://access.redhat.com/errata/RHSA-2011:1811","name":"MISC:https://access.redhat.com/errata/RHSA-2011:1811","refsource":"MITRE","tags":[],"title":"Red Hat Customer Portal","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://access.redhat.com/security/cve/CVE-2009-4274","name":"MISC:https://access.redhat.com/security/cve/CVE-2009-4274","refsource":"MITRE","tags":[],"title":"access.redhat.com | CVE-2009-4274","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2009-4274","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2009-4274","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2009","cve_id":"4274","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"netpbm","cpe5":"netpbm","cpe6":"10.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"4274","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"netpbm","cpe5":"netpbm","cpe6":"10.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"4274","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"netpbm","cpe5":"netpbm","cpe6":"10.10","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"4274","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"netpbm","cpe5":"netpbm","cpe6":"10.11","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"4274","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"netpbm","cpe5":"netpbm","cpe6":"10.12","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"4274","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"netpbm","cpe5":"netpbm","cpe6":"10.13","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"4274","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"netpbm","cpe5":"netpbm","cpe6":"10.14","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"4274","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"netpbm","cpe5":"netpbm","cpe6":"10.15","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"4274","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"netpbm","cpe5":"netpbm","cpe6":"10.16","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"4274","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"netpbm","cpe5":"netpbm","cpe6":"10.17","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"4274","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"netpbm","cpe5":"netpbm","cpe6":"10.18","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"4274","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"netpbm","cpe5":"netpbm","cpe6":"10.19","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"4274","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"netpbm","cpe5":"netpbm","cpe6":"10.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"4274","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"netpbm","cpe5":"netpbm","cpe6":"10.20","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"4274","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"netpbm","cpe5":"netpbm","cpe6":"10.21","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"4274","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"netpbm","cpe5":"netpbm","cpe6":"10.22","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"4274","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"netpbm","cpe5":"netpbm","cpe6":"10.23","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"4274","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"netpbm","cpe5":"netpbm","cpe6":"10.24","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"4274","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"netpbm","cpe5":"netpbm","cpe6":"10.25","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"4274","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"netpbm","cpe5":"netpbm","cpe6":"10.26","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"4274","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"netpbm","cpe5":"netpbm","cpe6":"10.27","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"4274","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"netpbm","cpe5":"netpbm","cpe6":"10.28","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"4274","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"netpbm","cpe5":"netpbm","cpe6":"10.29","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"4274","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"netpbm","cpe5":"netpbm","cpe6":"10.3","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"4274","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"netpbm","cpe5":"netpbm","cpe6":"10.30","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"4274","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"netpbm","cpe5":"netpbm","cpe6":"10.31","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"4274","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"netpbm","cpe5":"netpbm","cpe6":"10.32","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"4274","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"netpbm","cpe5":"netpbm","cpe6":"10.33","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"4274","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"netpbm","cpe5":"netpbm","cpe6":"10.34","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"4274","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"netpbm","cpe5":"netpbm","cpe6":"10.35.00","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"4274","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"netpbm","cpe5":"netpbm","cpe6":"10.35.01","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"4274","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"netpbm","cpe5":"netpbm","cpe6":"10.35.02","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"4274","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"netpbm","cpe5":"netpbm","cpe6":"10.35.03","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"4274","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"netpbm","cpe5":"netpbm","cpe6":"10.35.04","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"4274","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"netpbm","cpe5":"netpbm","cpe6":"10.35.05","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"4274","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"netpbm","cpe5":"netpbm","cpe6":"10.35.06","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"4274","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"netpbm","cpe5":"netpbm","cpe6":"10.35.07","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"4274","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"netpbm","cpe5":"netpbm","cpe6":"10.35.08","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"4274","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"netpbm","cpe5":"netpbm","cpe6":"10.35.09","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"4274","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"netpbm","cpe5":"netpbm","cpe6":"10.35.10","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"4274","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"netpbm","cpe5":"netpbm","cpe6":"10.35.11","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"4274","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"netpbm","cpe5":"netpbm","cpe6":"10.35.12","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"4274","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"netpbm","cpe5":"netpbm","cpe6":"10.35.13","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"4274","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"netpbm","cpe5":"netpbm","cpe6":"10.35.14","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"4274","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"netpbm","cpe5":"netpbm","cpe6":"10.35.15","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"4274","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"netpbm","cpe5":"netpbm","cpe6":"10.35.16","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"4274","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"netpbm","cpe5":"netpbm","cpe6":"10.35.17","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"4274","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"netpbm","cpe5":"netpbm","cpe6":"10.35.18","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"4274","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"netpbm","cpe5":"netpbm","cpe6":"10.35.19","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"4274","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"netpbm","cpe5":"netpbm","cpe6":"10.35.20","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"4274","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"netpbm","cpe5":"netpbm","cpe6":"10.35.21","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"4274","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"netpbm","cpe5":"netpbm","cpe6":"10.35.22","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"4274","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"netpbm","cpe5":"netpbm","cpe6":"10.35.23","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"4274","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"netpbm","cpe5":"netpbm","cpe6":"10.35.24","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"4274","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"netpbm","cpe5":"netpbm","cpe6":"10.35.25","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"4274","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"netpbm","cpe5":"netpbm","cpe6":"10.35.26","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"4274","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"netpbm","cpe5":"netpbm","cpe6":"10.35.27","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"4274","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"netpbm","cpe5":"netpbm","cpe6":"10.35.28","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"4274","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"netpbm","cpe5":"netpbm","cpe6":"10.35.29","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"4274","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"netpbm","cpe5":"netpbm","cpe6":"10.35.30","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"4274","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"netpbm","cpe5":"netpbm","cpe6":"10.35.31","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"4274","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"netpbm","cpe5":"netpbm","cpe6":"10.35.32","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"4274","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"netpbm","cpe5":"netpbm","cpe6":"10.35.33","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"4274","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"netpbm","cpe5":"netpbm","cpe6":"10.35.34","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"4274","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"netpbm","cpe5":"netpbm","cpe6":"10.35.35","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"4274","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"netpbm","cpe5":"netpbm","cpe6":"10.35.36","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"4274","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"netpbm","cpe5":"netpbm","cpe6":"10.35.37","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"4274","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"netpbm","cpe5":"netpbm","cpe6":"10.35.38","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"4274","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"netpbm","cpe5":"netpbm","cpe6":"10.35.39","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"4274","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"netpbm","cpe5":"netpbm","cpe6":"10.35.40","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"4274","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"netpbm","cpe5":"netpbm","cpe6":"10.35.41","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"4274","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"netpbm","cpe5":"netpbm","cpe6":"10.35.42","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"4274","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"netpbm","cpe5":"netpbm","cpe6":"10.35.43","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"4274","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"netpbm","cpe5":"netpbm","cpe6":"10.35.44","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"4274","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"netpbm","cpe5":"netpbm","cpe6":"10.35.45","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"4274","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"netpbm","cpe5":"netpbm","cpe6":"10.35.46","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"4274","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"netpbm","cpe5":"netpbm","cpe6":"10.35.47","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"4274","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"netpbm","cpe5":"netpbm","cpe6":"10.36.00","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"4274","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"netpbm","cpe5":"netpbm","cpe6":"10.37.00","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"4274","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"netpbm","cpe5":"netpbm","cpe6":"10.38.00","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"4274","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"netpbm","cpe5":"netpbm","cpe6":"10.39.00","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"4274","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"netpbm","cpe5":"netpbm","cpe6":"10.4","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"4274","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"netpbm","cpe5":"netpbm","cpe6":"10.40.00","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"4274","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"netpbm","cpe5":"netpbm","cpe6":"10.41.00","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"4274","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"netpbm","cpe5":"netpbm","cpe6":"10.42.00","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"4274","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"netpbm","cpe5":"netpbm","cpe6":"10.43.00","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"4274","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"netpbm","cpe5":"netpbm","cpe6":"10.44.00","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"4274","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"netpbm","cpe5":"netpbm","cpe6":"10.45.00","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"4274","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"netpbm","cpe5":"netpbm","cpe6":"10.46.00","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"4274","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"netpbm","cpe5":"netpbm","cpe6":"10.47.00","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"4274","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"netpbm","cpe5":"netpbm","cpe6":"10.47.01","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"4274","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"netpbm","cpe5":"netpbm","cpe6":"10.47.02","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"4274","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"netpbm","cpe5":"netpbm","cpe6":"10.47.03","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"4274","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"netpbm","cpe5":"netpbm","cpe6":"10.47.04","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"4274","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"netpbm","cpe5":"netpbm","cpe6":"10.47.05","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"4274","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"netpbm","cpe5":"netpbm","cpe6":"10.47.06","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"4274","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"netpbm","cpe5":"netpbm","cpe6":"10.5","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"4274","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"netpbm","cpe5":"netpbm","cpe6":"10.6","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"4274","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"netpbm","cpe5":"netpbm","cpe6":"10.7","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"4274","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"netpbm","cpe5":"netpbm","cpe6":"10.8","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"4274","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"netpbm","cpe5":"netpbm","cpe6":"10.9","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[{"cvename":"CVE-2009-4274","organization":"Red Hat","lastmodified":"2010-02-17","contributor":"Tomas Hoger","statementText":"Red Hat is aware of this issue and is tracking it via the following bug: https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2009-4274 The Red Hat Security Response Team has rated this issue as having moderate security impact, a future update may address this flaw. More information regarding issue severity can be found here: http://www.redhat.com/security/updates/classification/","cve_year":"2009","cve_id":"4274","crc32":"06a49480"}],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-07T06:54:10.362Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"name":"RHSA-2011:1811","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"],"url":"http://www.redhat.com/support/errata/RHSA-2011-1811.html"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://netpbm.svn.sourceforge.net/viewvc/netpbm/stable/converter/ppm/xpmtoppm.c?view=patch&r1=995&r2=1076&pathrev=1076"},{"name":"ADV-2010-0358","tags":["vdb-entry","x_refsource_VUPEN","x_transferred"],"url":"http://www.vupen.com/english/advisories/2010/0358"},{"name":"38530","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/38530"},{"name":"[oss-security] 20100209 vulnerability in netpbm (CVE-2009-4274)","tags":["mailing-list","x_refsource_MLIST","x_transferred"],"url":"http://www.openwall.com/lists/oss-security/2010/02/09/11"},{"name":"ADV-2010-0780","tags":["vdb-entry","x_refsource_VUPEN","x_transferred"],"url":"http://www.vupen.com/english/advisories/2010/0780"},{"name":"netpbm-xpm-bo(56207)","tags":["vdb-entry","x_refsource_XF","x_transferred"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/56207"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=546580"},{"name":"SUSE-SR:2010:006","tags":["vendor-advisory","x_refsource_SUSE","x_transferred"],"url":"http://lists.opensuse.org/opensuse-security-announce/2010-03/msg00004.html"},{"name":"DSA-2026","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred"],"url":"http://www.debian.org/security/2010/dsa-2026"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://netpbm.svn.sourceforge.net/viewvc/netpbm/stable/doc/HISTORY?view=markup"},{"name":"38915","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/38915"},{"name":"38164","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/38164"},{"name":"MDVSA-2010:039","tags":["vendor-advisory","x_refsource_MANDRIVA","x_transferred"],"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:039"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2010-02-09T00:00:00.000Z","descriptions":[{"lang":"en","value":"Stack-based buffer overflow in converter/ppm/xpmtoppm.c in netpbm before 10.47.07 allows context-dependent attackers to cause a denial of service (application crash) or possibly execute arbitrary code via an XPM image file that contains a crafted header field associated with a large color index value."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2017-08-16T14:57:01.000Z","orgId":"53f830b8-0a3f-465b-8143-3b8a9948e749","shortName":"redhat"},"references":[{"name":"RHSA-2011:1811","tags":["vendor-advisory","x_refsource_REDHAT"],"url":"http://www.redhat.com/support/errata/RHSA-2011-1811.html"},{"tags":["x_refsource_CONFIRM"],"url":"http://netpbm.svn.sourceforge.net/viewvc/netpbm/stable/converter/ppm/xpmtoppm.c?view=patch&r1=995&r2=1076&pathrev=1076"},{"name":"ADV-2010-0358","tags":["vdb-entry","x_refsource_VUPEN"],"url":"http://www.vupen.com/english/advisories/2010/0358"},{"name":"38530","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/38530"},{"name":"[oss-security] 20100209 vulnerability in netpbm (CVE-2009-4274)","tags":["mailing-list","x_refsource_MLIST"],"url":"http://www.openwall.com/lists/oss-security/2010/02/09/11"},{"name":"ADV-2010-0780","tags":["vdb-entry","x_refsource_VUPEN"],"url":"http://www.vupen.com/english/advisories/2010/0780"},{"name":"netpbm-xpm-bo(56207)","tags":["vdb-entry","x_refsource_XF"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/56207"},{"tags":["x_refsource_CONFIRM"],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=546580"},{"name":"SUSE-SR:2010:006","tags":["vendor-advisory","x_refsource_SUSE"],"url":"http://lists.opensuse.org/opensuse-security-announce/2010-03/msg00004.html"},{"name":"DSA-2026","tags":["vendor-advisory","x_refsource_DEBIAN"],"url":"http://www.debian.org/security/2010/dsa-2026"},{"tags":["x_refsource_CONFIRM"],"url":"http://netpbm.svn.sourceforge.net/viewvc/netpbm/stable/doc/HISTORY?view=markup"},{"name":"38915","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/38915"},{"name":"38164","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/38164"},{"name":"MDVSA-2010:039","tags":["vendor-advisory","x_refsource_MANDRIVA"],"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:039"}]}},"cveMetadata":{"assignerOrgId":"53f830b8-0a3f-465b-8143-3b8a9948e749","assignerShortName":"redhat","cveId":"CVE-2009-4274","datePublished":"2010-02-12T21:00:00.000Z","dateReserved":"2009-12-10T00:00:00.000Z","dateUpdated":"2024-08-07T06:54:10.362Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2010-02-12 21:30:00","lastModifiedDate":"2026-04-29 01:13:23","problem_types":["CWE-119","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"HIGH","exploitabilityScore":10,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:netpbm:netpbm:10.0:*:*:*:*:*:*:*","matchCriteriaId":"F79F02C3-950F-4D47-971A-3C1367F1642C"},{"vulnerable":true,"criteria":"cpe:2.3:a:netpbm:netpbm:10.1:*:*:*:*:*:*:*","matchCriteriaId":"0344253A-AF59-499B-81DF-5494A34B115F"},{"vulnerable":true,"criteria":"cpe:2.3:a:netpbm:netpbm:10.2:*:*:*:*:*:*:*","matchCriteriaId":"E7297482-7D30-484A-8F8D-AFEA2E468725"},{"vulnerable":true,"criteria":"cpe:2.3:a:netpbm:netpbm:10.3:*:*:*:*:*:*:*","matchCriteriaId":"93BA3D19-C291-468E-9E4E-E8374AE1BD32"},{"vulnerable":true,"criteria":"cpe:2.3:a:netpbm:netpbm:10.4:*:*:*:*:*:*:*","matchCriteriaId":"85CF9240-FAEE-4BA2-8374-8B81F738521A"},{"vulnerable":true,"criteria":"cpe:2.3:a:netpbm:netpbm:10.5:*:*:*:*:*:*:*","matchCriteriaId":"45457716-9219-4A88-A824-B45FA16643D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:netpbm:netpbm:10.6:*:*:*:*:*:*:*","matchCriteriaId":"93A0526D-918E-4FAE-90AF-2BA49F9D5276"},{"vulnerable":true,"criteria":"cpe:2.3:a:netpbm:netpbm:10.7:*:*:*:*:*:*:*","matchCriteriaId":"7AD350ED-1327-483A-BF73-02AB9924EDED"},{"vulnerable":true,"criteria":"cpe:2.3:a:netpbm:netpbm:10.8:*:*:*:*:*:*:*","matchCriteriaId":"98C11849-BCD4-4982-A779-435669BD668F"},{"vulnerable":true,"criteria":"cpe:2.3:a:netpbm:netpbm:10.9:*:*:*:*:*:*:*","matchCriteriaId":"C94984E9-22EE-4B24-AFCB-52137A871117"},{"vulnerable":true,"criteria":"cpe:2.3:a:netpbm:netpbm:10.10:*:*:*:*:*:*:*","matchCriteriaId":"23B10069-89E1-4E63-BCFF-C210CE3C5655"},{"vulnerable":true,"criteria":"cpe:2.3:a:netpbm:netpbm:10.11:*:*:*:*:*:*:*","matchCriteriaId":"EC42B061-EB8E-49B4-B041-42B31672C42D"},{"vulnerable":true,"criteria":"cpe:2.3:a:netpbm:netpbm:10.12:*:*:*:*:*:*:*","matchCriteriaId":"DFAE142A-4F71-4452-8DAD-9D6BA11EBF4C"},{"vulnerable":true,"criteria":"cpe:2.3:a:netpbm:netpbm:10.13:*:*:*:*:*:*:*","matchCriteriaId":"179366EE-D637-4345-8759-81D5E12EFFA8"},{"vulnerable":true,"criteria":"cpe:2.3:a:netpbm:netpbm:10.14:*:*:*:*:*:*:*","matchCriteriaId":"725CFC44-43C8-47FF-9935-FA006B6338FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:netpbm:netpbm:10.15:*:*:*:*:*:*:*","matchCriteriaId":"3A331F93-08C2-4F45-98AD-46DBE38A9785"},{"vulnerable":true,"criteria":"cpe:2.3:a:netpbm:netpbm:10.16:*:*:*:*:*:*:*","matchCriteriaId":"FEFB0157-CF91-4FCB-8786-4024595B3EE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:netpbm:netpbm:10.17:*:*:*:*:*:*:*","matchCriteriaId":"92045C29-20B4-46D0-9643-491BB0642D12"},{"vulnerable":true,"criteria":"cpe:2.3:a:netpbm:netpbm:10.18:*:*:*:*:*:*:*","matchCriteriaId":"148A51ED-1A00-45D3-934E-96CA2759F5A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:netpbm:netpbm:10.19:*:*:*:*:*:*:*","matchCriteriaId":"77BE0692-E688-4438-98C7-FA1FCE05F41C"},{"vulnerable":true,"criteria":"cpe:2.3:a:netpbm:netpbm:10.20:*:*:*:*:*:*:*","matchCriteriaId":"1904CB89-F576-4DFF-9639-9263D0ADE0B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:netpbm:netpbm:10.21:*:*:*:*:*:*:*","matchCriteriaId":"50D11F39-3B4F-43E4-AC5E-E1B5931BCBB1"},{"vulnerable":true,"criteria":"cpe:2.3:a:netpbm:netpbm:10.22:*:*:*:*:*:*:*","matchCriteriaId":"97023E9B-520D-4E6F-BA7F-052BA89BF2E1"},{"vulnerable":true,"criteria":"cpe:2.3:a:netpbm:netpbm:10.23:*:*:*:*:*:*:*","matchCriteriaId":"93A152B4-8483-4874-88C0-4679831BB60E"},{"vulnerable":true,"criteria":"cpe:2.3:a:netpbm:netpbm:10.24:*:*:*:*:*:*:*","matchCriteriaId":"9BBAE4A7-B0E1-4E50-8775-CAEF3E49B7EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:netpbm:netpbm:10.25:*:*:*:*:*:*:*","matchCriteriaId":"CDE78BA1-4001-4676-8BCB-FBC081A5D733"},{"vulnerable":true,"criteria":"cpe:2.3:a:netpbm:netpbm:10.26:*:*:*:*:*:*:*","matchCriteriaId":"FF606C17-AD8A-4D81-AB55-50B0C4B7763F"},{"vulnerable":true,"criteria":"cpe:2.3:a:netpbm:netpbm:10.27:*:*:*:*:*:*:*","matchCriteriaId":"906047FD-1D75-4F97-977D-2A22A1DC87B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:netpbm:netpbm:10.28:*:*:*:*:*:*:*","matchCriteriaId":"2DA92693-6629-4A8D-9C54-418569C852F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:netpbm:netpbm:10.29:*:*:*:*:*:*:*","matchCriteriaId":"F078E1C6-3FB7-415B-A49A-455BE55148B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:netpbm:netpbm:10.30:*:*:*:*:*:*:*","matchCriteriaId":"9F97984A-04F4-4F69-B03B-D06FD0F21EE6"},{"vulnerable":true,"criteria":"cpe:2.3:a:netpbm:netpbm:10.31:*:*:*:*:*:*:*","matchCriteriaId":"53FB010A-9B82-41F9-9DDB-4DCC0BFA0365"},{"vulnerable":true,"criteria":"cpe:2.3:a:netpbm:netpbm:10.32:*:*:*:*:*:*:*","matchCriteriaId":"07292430-0952-4E40-9012-1DD5709D2F9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:netpbm:netpbm:10.33:*:*:*:*:*:*:*","matchCriteriaId":"019C4B30-4F04-4068-80B1-884F9607EC3A"},{"vulnerable":true,"criteria":"cpe:2.3:a:netpbm:netpbm:10.34:*:*:*:*:*:*:*","matchCriteriaId":"F74038FE-C361-415B-AC47-744D3792E707"},{"vulnerable":true,"criteria":"cpe:2.3:a:netpbm:netpbm:10.35.00:*:*:*:*:*:*:*","matchCriteriaId":"7A6B8C20-2603-4BC6-A9C5-363E45B86492"},{"vulnerable":true,"criteria":"cpe:2.3:a:netpbm:netpbm:10.35.01:*:*:*:*:*:*:*","matchCriteriaId":"16998237-B53D-4E6C-B2E7-3C17BE483780"},{"vulnerable":true,"criteria":"cpe:2.3:a:netpbm:netpbm:10.35.02:*:*:*:*:*:*:*","matchCriteriaId":"4998E602-7E72-4ED9-806F-2DF117827F24"},{"vulnerable":true,"criteria":"cpe:2.3:a:netpbm:netpbm:10.35.03:*:*:*:*:*:*:*","matchCriteriaId":"5A01D9E5-14BD-416D-8363-278FBA991BE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:netpbm:netpbm:10.35.04:*:*:*:*:*:*:*","matchCriteriaId":"59B55BD5-0E1C-4A13-965C-BAFBE480C384"},{"vulnerable":true,"criteria":"cpe:2.3:a:netpbm:netpbm:10.35.05:*:*:*:*:*:*:*","matchCriteriaId":"EC498C66-4E32-4E4B-9BB0-3943CB963BC8"},{"vulnerable":true,"criteria":"cpe:2.3:a:netpbm:netpbm:10.35.06:*:*:*:*:*:*:*","matchCriteriaId":"FF4F989C-B9AF-4A0D-A39E-A9405E38229F"},{"vulnerable":true,"criteria":"cpe:2.3:a:netpbm:netpbm:10.35.07:*:*:*:*:*:*:*","matchCriteriaId":"1FCC7D4D-09B1-4063-9FE8-F88032B91FA9"},{"vulnerable":true,"criteria":"cpe:2.3:a:netpbm:netpbm:10.35.08:*:*:*:*:*:*:*","matchCriteriaId":"BEF8AB55-8A95-47CD-960A-E9A920632B51"},{"vulnerable":true,"criteria":"cpe:2.3:a:netpbm:netpbm:10.35.09:*:*:*:*:*:*:*","matchCriteriaId":"FB45C9DA-9503-4F5C-8079-0C47E778EAB0"},{"vulnerable":true,"criteria":"cpe:2.3:a:netpbm:netpbm:10.35.10:*:*:*:*:*:*:*","matchCriteriaId":"3B1D6ABC-D56F-4484-90D0-45CD3E7B682C"},{"vulnerable":true,"criteria":"cpe:2.3:a:netpbm:netpbm:10.35.11:*:*:*:*:*:*:*","matchCriteriaId":"B48121BF-EDA1-4EAD-B24B-7BAF6668D4BB"},{"vulnerable":true,"criteria":"cpe:2.3:a:netpbm:netpbm:10.35.12:*:*:*:*:*:*:*","matchCriteriaId":"9E079966-8423-4638-8A55-BC9F2412D4E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:netpbm:netpbm:10.35.13:*:*:*:*:*:*:*","matchCriteriaId":"0BE5E653-3B78-4DCE-9FE8-1126FC18D8B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:netpbm:netpbm:10.35.14:*:*:*:*:*:*:*","matchCriteriaId":"D339F6D7-9E9A-46C2-9823-E534F3BEBDC4"},{"vulnerable":true,"criteria":"cpe:2.3:a:netpbm:netpbm:10.35.15:*:*:*:*:*:*:*","matchCriteriaId":"A829E428-77AA-4B8F-B4E6-BB89F0054F20"},{"vulnerable":true,"criteria":"cpe:2.3:a:netpbm:netpbm:10.35.16:*:*:*:*:*:*:*","matchCriteriaId":"A6470755-BE74-49FB-B4C7-6869FB33A096"},{"vulnerable":true,"criteria":"cpe:2.3:a:netpbm:netpbm:10.35.17:*:*:*:*:*:*:*","matchCriteriaId":"7FEFA0BB-1542-4A88-BC95-A60AAEF90D5C"},{"vulnerable":true,"criteria":"cpe:2.3:a:netpbm:netpbm:10.35.18:*:*:*:*:*:*:*","matchCriteriaId":"090C90E2-D688-44C2-88D7-E40F7D919FA8"},{"vulnerable":true,"criteria":"cpe:2.3:a:netpbm:netpbm:10.35.19:*:*:*:*:*:*:*","matchCriteriaId":"675512A2-6E2A-46BA-9237-114B4EA6248F"},{"vulnerable":true,"criteria":"cpe:2.3:a:netpbm:netpbm:10.35.20:*:*:*:*:*:*:*","matchCriteriaId":"185FF47F-321E-4D26-893D-BB4F4B532670"},{"vulnerable":true,"criteria":"cpe:2.3:a:netpbm:netpbm:10.35.21:*:*:*:*:*:*:*","matchCriteriaId":"B402DB46-6103-4428-B6BF-9263D9270EE0"},{"vulnerable":true,"criteria":"cpe:2.3:a:netpbm:netpbm:10.35.22:*:*:*:*:*:*:*","matchCriteriaId":"599D4BAC-1266-4A30-A4C5-4BA13EC47F62"},{"vulnerable":true,"criteria":"cpe:2.3:a:netpbm:netpbm:10.35.23:*:*:*:*:*:*:*","matchCriteriaId":"23241E2B-21B9-4C97-B865-5C3652C27401"},{"vulnerable":true,"criteria":"cpe:2.3:a:netpbm:netpbm:10.35.24:*:*:*:*:*:*:*","matchCriteriaId":"B4A40DC0-AE35-4597-8A55-D5022289435E"},{"vulnerable":true,"criteria":"cpe:2.3:a:netpbm:netpbm:10.35.25:*:*:*:*:*:*:*","matchCriteriaId":"C12B85A1-5607-4037-A362-0270EF710514"},{"vulnerable":true,"criteria":"cpe:2.3:a:netpbm:netpbm:10.35.26:*:*:*:*:*:*:*","matchCriteriaId":"03B39A1A-DC18-413E-A869-9D6C7C77BF8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:netpbm:netpbm:10.35.27:*:*:*:*:*:*:*","matchCriteriaId":"4F62F30D-F8D9-4B47-9CFC-8F54B3F589C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:netpbm:netpbm:10.35.28:*:*:*:*:*:*:*","matchCriteriaId":"89B0ACB2-FE13-4145-8EAE-9D6FB7FEDD60"},{"vulnerable":true,"criteria":"cpe:2.3:a:netpbm:netpbm:10.35.29:*:*:*:*:*:*:*","matchCriteriaId":"0253F8B8-346C-40F0-9225-4593EAF39861"},{"vulnerable":true,"criteria":"cpe:2.3:a:netpbm:netpbm:10.35.30:*:*:*:*:*:*:*","matchCriteriaId":"2411D682-BEB2-41E0-B211-4E8EA0E551C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:netpbm:netpbm:10.35.31:*:*:*:*:*:*:*","matchCriteriaId":"97036446-8A06-4AB6-842B-2186A88FBB1A"},{"vulnerable":true,"criteria":"cpe:2.3:a:netpbm:netpbm:10.35.32:*:*:*:*:*:*:*","matchCriteriaId":"FC9F56AC-906E-4713-83ED-79A8673F59BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:netpbm:netpbm:10.35.33:*:*:*:*:*:*:*","matchCriteriaId":"A77A17C7-C323-4182-A099-BB3E92BF12D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:netpbm:netpbm:10.35.34:*:*:*:*:*:*:*","matchCriteriaId":"82DB51EA-A050-417A-8603-97BD33ACB9B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:netpbm:netpbm:10.35.35:*:*:*:*:*:*:*","matchCriteriaId":"48468D84-76E9-476D-8470-3950C8281118"},{"vulnerable":true,"criteria":"cpe:2.3:a:netpbm:netpbm:10.35.36:*:*:*:*:*:*:*","matchCriteriaId":"7472AD57-68B3-43BE-95D4-F21D39708A4B"},{"vulnerable":true,"criteria":"cpe:2.3:a:netpbm:netpbm:10.35.37:*:*:*:*:*:*:*","matchCriteriaId":"DAA0C21F-DB95-43D9-B7B2-B076043828E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:netpbm:netpbm:10.35.38:*:*:*:*:*:*:*","matchCriteriaId":"3658F6EA-E897-4A24-AD82-F3EBD4567D27"},{"vulnerable":true,"criteria":"cpe:2.3:a:netpbm:netpbm:10.35.39:*:*:*:*:*:*:*","matchCriteriaId":"F887C654-43D9-4374-88D8-DCA800B7F449"},{"vulnerable":true,"criteria":"cpe:2.3:a:netpbm:netpbm:10.35.40:*:*:*:*:*:*:*","matchCriteriaId":"34001491-58AD-4F6C-9159-C27671EA1574"},{"vulnerable":true,"criteria":"cpe:2.3:a:netpbm:netpbm:10.35.41:*:*:*:*:*:*:*","matchCriteriaId":"347D3197-1915-4417-B72D-0C23BEFBAA32"},{"vulnerable":true,"criteria":"cpe:2.3:a:netpbm:netpbm:10.35.42:*:*:*:*:*:*:*","matchCriteriaId":"0256E7B3-E119-41A4-B49D-4C08D364C22C"},{"vulnerable":true,"criteria":"cpe:2.3:a:netpbm:netpbm:10.35.43:*:*:*:*:*:*:*","matchCriteriaId":"2EA3DD4D-28E0-4266-9024-A4DFF832512E"},{"vulnerable":true,"criteria":"cpe:2.3:a:netpbm:netpbm:10.35.44:*:*:*:*:*:*:*","matchCriteriaId":"02FAFCFB-0D3F-4906-ADCE-BF7F06167692"},{"vulnerable":true,"criteria":"cpe:2.3:a:netpbm:netpbm:10.35.45:*:*:*:*:*:*:*","matchCriteriaId":"EB184F25-C4ED-4655-B79D-6B00E22F9097"},{"vulnerable":true,"criteria":"cpe:2.3:a:netpbm:netpbm:10.35.46:*:*:*:*:*:*:*","matchCriteriaId":"43FC34D4-576B-46D6-B13C-EE17C0A5AAE9"},{"vulnerable":true,"criteria":"cpe:2.3:a:netpbm:netpbm:10.35.47:*:*:*:*:*:*:*","matchCriteriaId":"0618AF8A-0927-45CC-8BF5-93B1083B8147"},{"vulnerable":true,"criteria":"cpe:2.3:a:netpbm:netpbm:10.36.00:*:*:*:*:*:*:*","matchCriteriaId":"4A715086-7459-4E99-8936-49F77323D17C"},{"vulnerable":true,"criteria":"cpe:2.3:a:netpbm:netpbm:10.37.00:*:*:*:*:*:*:*","matchCriteriaId":"979690E7-827E-4131-A3CD-235340A2FC2B"},{"vulnerable":true,"criteria":"cpe:2.3:a:netpbm:netpbm:10.38.00:*:*:*:*:*:*:*","matchCriteriaId":"AD21B69B-5500-4130-9603-F46998AC7D96"},{"vulnerable":true,"criteria":"cpe:2.3:a:netpbm:netpbm:10.39.00:*:*:*:*:*:*:*","matchCriteriaId":"0E222667-1825-4377-AD6E-5C88979CD5A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:netpbm:netpbm:10.40.00:*:*:*:*:*:*:*","matchCriteriaId":"AFA2DCC3-007C-4EA4-BD2B-18C776D3CBAD"},{"vulnerable":true,"criteria":"cpe:2.3:a:netpbm:netpbm:10.41.00:*:*:*:*:*:*:*","matchCriteriaId":"B5A9A4DD-FCE5-4585-97A5-F91120F9F2D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:netpbm:netpbm:10.42.00:*:*:*:*:*:*:*","matchCriteriaId":"9A8E6AAC-2DFD-4E6F-BAFA-FC002E7FBF78"},{"vulnerable":true,"criteria":"cpe:2.3:a:netpbm:netpbm:10.43.00:*:*:*:*:*:*:*","matchCriteriaId":"9C739F6A-7DA4-4069-827D-B78DA08E4C12"},{"vulnerable":true,"criteria":"cpe:2.3:a:netpbm:netpbm:10.44.00:*:*:*:*:*:*:*","matchCriteriaId":"04BE3C40-8066-4C41-A566-F89236D5F112"},{"vulnerable":true,"criteria":"cpe:2.3:a:netpbm:netpbm:10.45.00:*:*:*:*:*:*:*","matchCriteriaId":"A66AB52D-ECF8-4D0E-906F-7FA1AC41CD84"},{"vulnerable":true,"criteria":"cpe:2.3:a:netpbm:netpbm:10.46.00:*:*:*:*:*:*:*","matchCriteriaId":"C11B4771-81FF-4FA4-AB56-0BD51AFF10D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:netpbm:netpbm:10.47.00:*:*:*:*:*:*:*","matchCriteriaId":"B15E831F-F5FB-487F-9359-A7188C2206BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:netpbm:netpbm:10.47.01:*:*:*:*:*:*:*","matchCriteriaId":"756FB7A1-2FD3-40A6-B992-5D5FF0E6A736"},{"vulnerable":true,"criteria":"cpe:2.3:a:netpbm:netpbm:10.47.02:*:*:*:*:*:*:*","matchCriteriaId":"51CEA68F-46F0-4795-9839-D961FC1A394F"},{"vulnerable":true,"criteria":"cpe:2.3:a:netpbm:netpbm:10.47.03:*:*:*:*:*:*:*","matchCriteriaId":"0A6F7C0A-FF13-4C64-B9D3-5E71FCF87813"},{"vulnerable":true,"criteria":"cpe:2.3:a:netpbm:netpbm:10.47.04:*:*:*:*:*:*:*","matchCriteriaId":"B20DFC28-0489-404A-8783-DCA6157EACCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:netpbm:netpbm:10.47.05:*:*:*:*:*:*:*","matchCriteriaId":"533419D8-A51D-4C51-A898-7E9068722FD5"},{"vulnerable":true,"criteria":"cpe:2.3:a:netpbm:netpbm:10.47.06:*:*:*:*:*:*:*","matchCriteriaId":"E141EBC6-830D-4ADD-8D03-DB528FF3E117"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2009","CveId":"4274","Ordinal":"1","Title":"CVE-2009-4274","CVE":"CVE-2009-4274","Year":"2009"},"notes":[{"CveYear":"2009","CveId":"4274","Ordinal":"1","NoteData":"Stack-based buffer overflow in converter/ppm/xpmtoppm.c in netpbm before 10.47.07 allows context-dependent attackers to cause a denial of service (application crash) or possibly execute arbitrary code via an XPM image file that contains a crafted header field associated with a large color index value.","Type":"Description","Title":"CVE-2009-4274"},{"CveYear":"2009","CveId":"4274","Ordinal":"2","NoteData":"2010-02-12","Type":"Other","Title":"Published"},{"CveYear":"2009","CveId":"4274","Ordinal":"3","NoteData":"2017-08-16","Type":"Other","Title":"Modified"}]}}}