Arbitrary Command Execution in pstopnm of netpbm

CVE-2005-2471 · HIGH Severity

AV:N/AC:L/AU:N/C:P/I:P/A:P

pstopnm in netpbm does not properly use the "-dSAFER" option when calling Ghostscript to convert a PostScript file into a (1) PBM, (2) PGM, or (3) PNM file, which allows external user-assisted attackers to execute arbitrary commands.

Learn more about our External Network Penetration Testing.