CVE-2005-2471

EPSS 2.1%

netpbm-free - insecure program execution

Published: 8/5/2005Modified: 4/28/2026

Description

pstopnm in netpbm does not properly use the "-dSAFER" option when calling Ghostscript to convert a PostScript file into a (1) PBM, (2) PGM, or (3) PNM file, which allows external user-assisted attackers to execute arbitrary commands.

Affected packages (2)

Debian/netpbm-freefrom 0, < 2:10.0-9
Debian/netpbm-freefrom 0, < 2:9.20-8.6

References (1)

ADVISORYhttps://security-tracker.debian.org/tracker/CVE-2005-2471