CVE-2005-2978

Name	CVE-2005-2978
Description	pnmtopng in netpbm before 10.25, when using the -trans option, uses uninitialized size and index variables when converting Portable Anymap (PNM) images to Portable Network Graphics (PNG), which might allow attackers to execute arbitrary code by modifying the stack.
Source	CVE (at NVD; CERT, LWN, oss-sec, fulldisc, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more)
References	DSA-878-1

Vulnerable and fixed packages

The table below lists information on source packages.

Source Package	Release	Version	Status
netpbm-free (PTS)	jessie	2:10.0-15.2	fixed
	buster, stretch	2:10.0-15.3	fixed
	bullseye	2:10.0-15.4	fixed
	bookworm	2:11.01.00-2	fixed
	trixie	2:11.05.02-1	fixed
	sid	2:11.05.03-1	fixed

The information below is based on the following data on fixed versions.

Package	Type	Release	Fixed Version	Urgency	Origin	Debian Bugs
netpbm-free	source	woody	(not affected)		DSA-878-1
netpbm-free	source	sarge	2:10.0-8sarge1		DSA-878-1
netpbm-free	source	(unstable)	2:10.0-10