Heap-based buffer overflows and integer signedness or overflow errors in sam2p
Summary
DLA-1127-1: sam2p - security update. Affects sam2p versions < 0.49.1-1+deb7u1. Fixed in 0.49.1-1+deb7u1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
sam2p is a program that converts raster (bitmap) images to PostScript or PDF files. It supports various input formats such as PBM, PGM, PPM, BMP, and TIFF. The program is commonly used for image manipulation and conversion tasks. However, several vulnerabilities have been discovered in sam2p that could potentially be exploited by attackers.
Vulnerability Detail
The vulnerabilities found in sam2p include heap-based buffer overflows, integer signedness, and overflow errors. These issues could allow an attacker to execute arbitrary code or cause a denial of service by crashing the program. The vulnerabilities were discovered by fpbibi and have been fixed by the upstream developers.
How To Fix
Minimum fixed version
0.49.1-1+deb7u1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade sam2pTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Conclusion
In conclusion, sam2p is vulnerable to heap-based buffer overflows, integer signedness, and overflow errors. It is important to upgrade to the latest version to mitigate these vulnerabilities. For further support on vulnerability remediation, you can contact DevNack.com.
See every vulnerability recorded for sam2p →
FAQ
sam2p is a program that converts raster images to PostScript or PDF files.
The vulnerabilities include heap-based buffer overflows, integer signedness, and overflow errors.
These vulnerabilities could allow an attacker to execute arbitrary code or cause a denial of service.
The vulnerabilities were discovered by fpbibi.
To fix these vulnerabilities, you should upgrade your sam2p packages to version 0.49.1-1+deb7u1 or later.
Related vulnerabilities
Recent vulnerabilities recorded for sam2p.
