VYPR
Unrated severityNVD Advisory· Published Aug 5, 2005· Updated Jun 16, 2026

CVE-2005-2471

CVE-2005-2471

Description

pstopnm in netpbm does not properly use the "-dSAFER" option when calling Ghostscript to convert a PostScript file into a (1) PBM, (2) PGM, or (3) PNM file, which allows external user-assisted attackers to execute arbitrary commands.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2
  • Netpbm/Netpbm2 versions
    cpe:2.3:a:netpbm:netpbm:2.10.0.8:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:netpbm:netpbm:2.10.0.8:*:*:*:*:*:*:*
    • (no CPE)

Patches

Vulnerability mechanics

References

13

News mentions

0

No linked articles in our index yet.