CVE-2009-4274

Stack-based buffer overflow in converter/ppm/xpmtoppm.c in netpbm before 10.47.07 allows context-dependent attackers to cause a denial of service (application crash) or possibly execute arbitrary code via an XPM image file that contains a crafted header field associated with a large color index value.

Published: 2010-02-12 Last update: 2026-04-29 Assigner: [email protected] Source: [email protected]
NVD Status：Modified，CVE State: published
View at NVD, CVE.org, EUVD

CVE-2009-4274 is rated Moderate Risk (59.8/100): CVSS High severity, with medium exploitation likelihood (EPSS 2.54%). Review affected assets and schedule remediation.

Risk is dynamic; we continuously reassess and refresh what is shown on this page as upstream context changes.

Exploit prediction scoring system (EPSS) score for CVE-2009-4274

EPSS lead: Daily EPSS estimates relative likelihood of exploitation; percentile ranks this CVE among scored vulnerabilities (higher = more severe relative rank).

# Date Old EPSS score New EPSS score Delta (New - Old)
1 2026-04-12 2.61% 2.54% -0.07%
2 2026-02-03 2.54% 2.61% +0.07%
3 2025-03-30 — 2.54% —

Full EPSS history (11 records total)

Common vulnerability scoring system (CVSS) metrics for CVE-2009-4274

CVSS metrics for this CVE.

Base score Version Severity Vector Exploitability Impact Score source
7.5 2.0 HIGH
AV:N/AC:L/Au:N/C:P/I:P/A:P Click to expand
Access vector (AV:N)
Can be exploited remotely over network reachability.
Access complexity (AC:L)
Exploitation conditions are straightforward and predictable.
Authentication (AU:N)
No authentication is required.
Confidentiality impact (C:P)
Partial confidentiality impact.
Integrity impact (I:P)
Partial integrity impact.
Availability impact (A:P)
Partial availability impact.
 10.0 6.4 [email protected]

Weakness enumeration for CVE-2009-4274

OS Trackers for CVE-2009-4274

vendor priority summary link
debian medium CVE-2009-4274 medium priority: Debian including 1 source packages (netpbm-free), 5 status rows across 5 suites (bookworm, bullseye, forky, sid, trixie): resolved 5. https://security-tracker.debian.org/tracker/CVE-2009-4274
gentoo normal CVE-2009-4274: 1 GLSA(s) (201311-08), 1 atom(s) (media-libs/netpbm); latest impact normal. https://bugs.gentoo.org/buglist.cgi?quicksearch=CVE-2009-4274
redhat medium — https://access.redhat.com/security/cve/CVE-2009-4274
ubuntu low CVE-2009-4274 low priority: Ubuntu including 1 source packages (netpbm-free), 7 status rows across 7 suites (dapper, hardy, intrepid, jaunty, karmic, lucid, upstream): released 6, ignored 1. https://ubuntu.com/security/CVE-2009-4274

Vendor comments (NVD) for CVE-2009-4274

  • Red Hat (2010-02-17T00:00:00)

    Red Hat is aware of this issue and is tracking it via the following bug: https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2009-4274 The Red Hat Security Response Team has rated this issue as having moderate security impact, a future update may address this flaw. More information regarding issue severity can be found here: http://www.redhat.com/security/updates/classification/

Affected software / configurations for CVE-2009-4274

Vendor Product Version Raw CPE
netpbm netpbm 10.0 cpe:2.3:a:netpbm:netpbm:10.0:*:*:*:*:*:*:*
netpbm netpbm 10.1 cpe:2.3:a:netpbm:netpbm:10.1:*:*:*:*:*:*:*
netpbm netpbm 10.2 cpe:2.3:a:netpbm:netpbm:10.2:*:*:*:*:*:*:*
netpbm netpbm 10.3 cpe:2.3:a:netpbm:netpbm:10.3:*:*:*:*:*:*:*
netpbm netpbm 10.4 cpe:2.3:a:netpbm:netpbm:10.4:*:*:*:*:*:*:*
netpbm netpbm 10.5 cpe:2.3:a:netpbm:netpbm:10.5:*:*:*:*:*:*:*
netpbm netpbm 10.6 cpe:2.3:a:netpbm:netpbm:10.6:*:*:*:*:*:*:*
netpbm netpbm 10.7 cpe:2.3:a:netpbm:netpbm:10.7:*:*:*:*:*:*:*
netpbm netpbm 10.8 cpe:2.3:a:netpbm:netpbm:10.8:*:*:*:*:*:*:*
netpbm netpbm 10.9 cpe:2.3:a:netpbm:netpbm:10.9:*:*:*:*:*:*:*
netpbm netpbm 10.10 cpe:2.3:a:netpbm:netpbm:10.10:*:*:*:*:*:*:*
netpbm netpbm 10.11 cpe:2.3:a:netpbm:netpbm:10.11:*:*:*:*:*:*:*
netpbm netpbm 10.12 cpe:2.3:a:netpbm:netpbm:10.12:*:*:*:*:*:*:*
netpbm netpbm 10.13 cpe:2.3:a:netpbm:netpbm:10.13:*:*:*:*:*:*:*
netpbm netpbm 10.14 cpe:2.3:a:netpbm:netpbm:10.14:*:*:*:*:*:*:*
netpbm netpbm 10.15 cpe:2.3:a:netpbm:netpbm:10.15:*:*:*:*:*:*:*
netpbm netpbm 10.16 cpe:2.3:a:netpbm:netpbm:10.16:*:*:*:*:*:*:*
netpbm netpbm 10.17 cpe:2.3:a:netpbm:netpbm:10.17:*:*:*:*:*:*:*
netpbm netpbm 10.18 cpe:2.3:a:netpbm:netpbm:10.18:*:*:*:*:*:*:*
netpbm netpbm 10.19 cpe:2.3:a:netpbm:netpbm:10.19:*:*:*:*:*:*:*
netpbm netpbm 10.20 cpe:2.3:a:netpbm:netpbm:10.20:*:*:*:*:*:*:*
netpbm netpbm 10.21 cpe:2.3:a:netpbm:netpbm:10.21:*:*:*:*:*:*:*
netpbm netpbm 10.22 cpe:2.3:a:netpbm:netpbm:10.22:*:*:*:*:*:*:*
netpbm netpbm 10.23 cpe:2.3:a:netpbm:netpbm:10.23:*:*:*:*:*:*:*
netpbm netpbm 10.24 cpe:2.3:a:netpbm:netpbm:10.24:*:*:*:*:*:*:*
netpbm netpbm 10.25 cpe:2.3:a:netpbm:netpbm:10.25:*:*:*:*:*:*:*
netpbm netpbm 10.26 cpe:2.3:a:netpbm:netpbm:10.26:*:*:*:*:*:*:*
netpbm netpbm 10.27 cpe:2.3:a:netpbm:netpbm:10.27:*:*:*:*:*:*:*
netpbm netpbm 10.28 cpe:2.3:a:netpbm:netpbm:10.28:*:*:*:*:*:*:*
netpbm netpbm 10.29 cpe:2.3:a:netpbm:netpbm:10.29:*:*:*:*:*:*:*
netpbm netpbm 10.30 cpe:2.3:a:netpbm:netpbm:10.30:*:*:*:*:*:*:*
netpbm netpbm 10.31 cpe:2.3:a:netpbm:netpbm:10.31:*:*:*:*:*:*:*
netpbm netpbm 10.32 cpe:2.3:a:netpbm:netpbm:10.32:*:*:*:*:*:*:*
netpbm netpbm 10.33 cpe:2.3:a:netpbm:netpbm:10.33:*:*:*:*:*:*:*
netpbm netpbm 10.34 cpe:2.3:a:netpbm:netpbm:10.34:*:*:*:*:*:*:*
netpbm netpbm 10.35.00 cpe:2.3:a:netpbm:netpbm:10.35.00:*:*:*:*:*:*:*
netpbm netpbm 10.35.01 cpe:2.3:a:netpbm:netpbm:10.35.01:*:*:*:*:*:*:*
netpbm netpbm 10.35.02 cpe:2.3:a:netpbm:netpbm:10.35.02:*:*:*:*:*:*:*
netpbm netpbm 10.35.03 cpe:2.3:a:netpbm:netpbm:10.35.03:*:*:*:*:*:*:*
netpbm netpbm 10.35.04 cpe:2.3:a:netpbm:netpbm:10.35.04:*:*:*:*:*:*:*
netpbm netpbm 10.35.05 cpe:2.3:a:netpbm:netpbm:10.35.05:*:*:*:*:*:*:*
netpbm netpbm 10.35.06 cpe:2.3:a:netpbm:netpbm:10.35.06:*:*:*:*:*:*:*
netpbm netpbm 10.35.07 cpe:2.3:a:netpbm:netpbm:10.35.07:*:*:*:*:*:*:*
netpbm netpbm 10.35.08 cpe:2.3:a:netpbm:netpbm:10.35.08:*:*:*:*:*:*:*
netpbm netpbm 10.35.09 cpe:2.3:a:netpbm:netpbm:10.35.09:*:*:*:*:*:*:*
netpbm netpbm 10.35.10 cpe:2.3:a:netpbm:netpbm:10.35.10:*:*:*:*:*:*:*
netpbm netpbm 10.35.11 cpe:2.3:a:netpbm:netpbm:10.35.11:*:*:*:*:*:*:*
netpbm netpbm 10.35.12 cpe:2.3:a:netpbm:netpbm:10.35.12:*:*:*:*:*:*:*
netpbm netpbm 10.35.13 cpe:2.3:a:netpbm:netpbm:10.35.13:*:*:*:*:*:*:*
netpbm netpbm 10.35.14 cpe:2.3:a:netpbm:netpbm:10.35.14:*:*:*:*:*:*:*
netpbm netpbm 10.35.15 cpe:2.3:a:netpbm:netpbm:10.35.15:*:*:*:*:*:*:*
netpbm netpbm 10.35.16 cpe:2.3:a:netpbm:netpbm:10.35.16:*:*:*:*:*:*:*
netpbm netpbm 10.35.17 cpe:2.3:a:netpbm:netpbm:10.35.17:*:*:*:*:*:*:*
netpbm netpbm 10.35.18 cpe:2.3:a:netpbm:netpbm:10.35.18:*:*:*:*:*:*:*
netpbm netpbm 10.35.19 cpe:2.3:a:netpbm:netpbm:10.35.19:*:*:*:*:*:*:*
netpbm netpbm 10.35.20 cpe:2.3:a:netpbm:netpbm:10.35.20:*:*:*:*:*:*:*
netpbm netpbm 10.35.21 cpe:2.3:a:netpbm:netpbm:10.35.21:*:*:*:*:*:*:*
netpbm netpbm 10.35.22 cpe:2.3:a:netpbm:netpbm:10.35.22:*:*:*:*:*:*:*
netpbm netpbm 10.35.23 cpe:2.3:a:netpbm:netpbm:10.35.23:*:*:*:*:*:*:*
netpbm netpbm 10.35.24 cpe:2.3:a:netpbm:netpbm:10.35.24:*:*:*:*:*:*:*
netpbm netpbm 10.35.25 cpe:2.3:a:netpbm:netpbm:10.35.25:*:*:*:*:*:*:*
netpbm netpbm 10.35.26 cpe:2.3:a:netpbm:netpbm:10.35.26:*:*:*:*:*:*:*
netpbm netpbm 10.35.27 cpe:2.3:a:netpbm:netpbm:10.35.27:*:*:*:*:*:*:*
netpbm netpbm 10.35.28 cpe:2.3:a:netpbm:netpbm:10.35.28:*:*:*:*:*:*:*
netpbm netpbm 10.35.29 cpe:2.3:a:netpbm:netpbm:10.35.29:*:*:*:*:*:*:*
netpbm netpbm 10.35.30 cpe:2.3:a:netpbm:netpbm:10.35.30:*:*:*:*:*:*:*
netpbm netpbm 10.35.31 cpe:2.3:a:netpbm:netpbm:10.35.31:*:*:*:*:*:*:*
netpbm netpbm 10.35.32 cpe:2.3:a:netpbm:netpbm:10.35.32:*:*:*:*:*:*:*
netpbm netpbm 10.35.33 cpe:2.3:a:netpbm:netpbm:10.35.33:*:*:*:*:*:*:*
netpbm netpbm 10.35.34 cpe:2.3:a:netpbm:netpbm:10.35.34:*:*:*:*:*:*:*
netpbm netpbm 10.35.35 cpe:2.3:a:netpbm:netpbm:10.35.35:*:*:*:*:*:*:*
netpbm netpbm 10.35.36 cpe:2.3:a:netpbm:netpbm:10.35.36:*:*:*:*:*:*:*
netpbm netpbm 10.35.37 cpe:2.3:a:netpbm:netpbm:10.35.37:*:*:*:*:*:*:*
netpbm netpbm 10.35.38 cpe:2.3:a:netpbm:netpbm:10.35.38:*:*:*:*:*:*:*
netpbm netpbm 10.35.39 cpe:2.3:a:netpbm:netpbm:10.35.39:*:*:*:*:*:*:*
netpbm netpbm 10.35.40 cpe:2.3:a:netpbm:netpbm:10.35.40:*:*:*:*:*:*:*
netpbm netpbm 10.35.41 cpe:2.3:a:netpbm:netpbm:10.35.41:*:*:*:*:*:*:*
netpbm netpbm 10.35.42 cpe:2.3:a:netpbm:netpbm:10.35.42:*:*:*:*:*:*:*
netpbm netpbm 10.35.43 cpe:2.3:a:netpbm:netpbm:10.35.43:*:*:*:*:*:*:*
netpbm netpbm 10.35.44 cpe:2.3:a:netpbm:netpbm:10.35.44:*:*:*:*:*:*:*

References for CVE-2009-4274

URL Tags
http://lists.opensuse.org/opensuse-security-announce/2010-03/msg00004.html
http://netpbm.svn.sourceforge.net/viewvc/netpbm/stable/converter/ppm/xpmtoppm.c?view=patch&r1=995&r2=1076&pathrev=1076
http://netpbm.svn.sourceforge.net/viewvc/netpbm/stable/doc/HISTORY?view=markup
http://secunia.com/advisories/38530
http://secunia.com/advisories/38915
http://www.debian.org/security/2010/dsa-2026
http://www.mandriva.com/security/advisories?name=MDVSA-2010:039
http://www.openwall.com/lists/oss-security/2010/02/09/11
http://www.redhat.com/support/errata/RHSA-2011-1811.html
http://www.securityfocus.com/bid/38164
http://www.vupen.com/english/advisories/2010/0358 Vendor Advisory
http://www.vupen.com/english/advisories/2010/0780
https://bugzilla.redhat.com/show_bug.cgi?id=546580
https://exchange.xforce.ibmcloud.com/vulnerabilities/56207
cvelogic Threat Intelligence